3 ms·
Any reason why AWS dynamic credentials use IAM users instead of STS and role assumption? That seems to be a somewhat more widely accepted way to do dynamic cred
by mentat 12y ago
Any reason why AWS dynamic credentials use IAM users instead of STS and role assumption? That seems to be a somewhat more widely accepted way to do dynamic credentials / role proxying.
- setheron 12y agothat would definitely be more idiomatic in AWS source: I am an Amazon employee
- ukd1 12y agocame here to see how it was done; was hoping for STS :(
- mentat 12y agohttps://github.com/dump247/docker-ec2-metadata https://github.com/dump247/docker-ec2-metadata and https://github.com/AdRoll/hologram https://github.com/AdRoll/hologram exist as examples of this, just FYI.