source-cooperative / source-cooperative/data.source.coop
Verify credential acquisition with an unmodified AWS SDK
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 24
- Forks
- 6
- Avg merge
- 1h 32m
- Merged PRs (30d)
- 1
Description
Phase 5 — API keys.
Do
Confirm a stock AWS SDK acquires and refreshes credentials from AWS_WEB_IDENTITY_TOKEN_FILE, AWS_ROLE_ARN and AWS_ENDPOINT_URL_STS alone, with no Source-specific code.
Done when
A plain boto3 script runs unattended across a credential expiry and keeps working.
Why it matters
This is the property that makes unattended operation real: the SDK re-reads the token file on refresh, so key rotation is invisible to the application.
Depends on source-cooperative/source.coop#548.
Part of source-cooperative/source.coop#491.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with a plain boto3 script using only AWS_WEB_IDENTITY_TOKEN_FILE, AWS_ROLE_ARN, and AWS_ENDPOINT_URL_STS, and review the prerequisite source-cooperative/source.coop#548. Exercise the script across credential expiry while changing the token file; done means it continues unattended without Source-specific code.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, python
- Domain
- authentication, cloud
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100