[Cyberduck-trac] [Cyberduck] #8880: S3 via an amazon assumed role

Cyberduck trac at trac.cyberduck.io
Tue Jun 16 05:37:05 UTC 2015


#8880: S3 via an amazon assumed role
----------------------------+----------------------------
    Reporter:  tigris       |      Owner:
        Type:  enhancement  |     Status:  new
    Priority:  low          |  Milestone:
   Component:  core         |    Version:  4.7
    Severity:  normal       |   Keywords:  s3 iam
Architecture:  Intel        |   Platform:  Mac OS X 10.10
----------------------------+----------------------------
 I am using amazon AssumeRole function to assume a role that can access an
 S3 bucket. This means to connect to S3, it needs more than just SecretKey
 and AccessKey, it also need SecurityToken or SessionToken which is an
 extremely large string.

 If you set these 3 things in your environment, you can use tools like
 awscli etc from command line. I would like to use cyberduck instead as it
 can thread nicely. But unfortunately cyberduck only supports IAM users and
 not roles.

 It does support roles from an EC2 instance, so I think it should be very
 easy to support from my own OSX laptop? I was thinking of just running a
 local proxy for 169.254.169.254 to fake the fact I am not running on EC2,
 but it seemed like overkill.

-- 
Ticket URL: <https://trac.cyberduck.io/ticket/8880>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list