Is there any easy way to make duplicity support AWS IAM instance role when uploading to s3

Asked by patrickshan

Hi,

Currently we already use aws IAM instance role to give some s3 privilege for some of instances. It seems currently boto will automatically use it if there is no KEY pairs passed to it. I have tested it with duplicity, it seems that it can not use that instnace's role to get the bucket access. And with instance role you can generate some temporary access/secret key pairs but with additional token. Is there any way to use this in duplicity?

Question information

Language:
English Edit question
Status:
Answered
For:
Duplicity Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
edso (ed.so) said :
#1

On 28.06.2014 13:41, patrickshan wrote:
> New question #250898 on Duplicity:
> https://answers.launchpad.net/duplicity/+question/250898
>
> Hi,
>
> Currently we already use aws IAM instance role to give some s3 privilege for some of instances. It seems currently boto will automatically use it if there is no KEY pairs passed to it. I have tested it with duplicity, it seems that it can not use that instnace's role to get the bucket access. And with instance role you can generate some temporary access/secret key pairs but with additional token. Is there any way to use this in duplicity?
>

try to research if boto supports it. afaics duplicity simply utilizes boto, which handles auth itself via env vars or boto.cfg file.

same goes for why instance role does not work.

additionally you might ask your wuestion in mailing list
 https://lists.nongnu.org/mailman/listinfo/duplicity-talk

..ede/duply.net

Revision history for this message
patrickshan (patrickshan-syd) said :
#2

Thanks edso.

It seems that boto does support token parameter in its configuration file. But I still got "BackendException: No connection to backend" error when I put all those information into ~/.boto configuration.

Revision history for this message
edso (ed.so) said :
#3

On 30.06.2014 04:52, patrickshan wrote:
> Question #250898 on Duplicity changed:
> https://answers.launchpad.net/duplicity/+question/250898
>
> patrickshan posted a new comment:
> Thanks edso.
>
> It seems that boto does support token parameter in its configuration
> file. But I still got "BackendException: No connection to backend" error
> when I put all those information into ~/.boto configuration.
>

try boto's support channels.. and/or ask on the mailing list. ..ede/duply.net

Revision history for this message
patrickshan (patrickshan-syd) said :
#4

Thanks edso. I'll have a try. thanks :)

Can you help with this problem?

Provide an answer of your own, or ask patrickshan for more information if necessary.

To post a message you must log in.