S3 Backend - Support for AWS_SESSION_TOKEN (STS)

tkg_bowen · 24 October 2018 14:02

Hello.

Currently Duplicacy supports authenticating with Amazon S3 using an access key and secret key, which serves most use cases. However, it would be great if it also supported AWS session tokens. These can be granted by the AWS Security Token Service (AWS STS) to provide temporary access to AWS resources.

Currently the session token is hardcoded to an empty string (as shown below). This request is to allow the user to be able to pass in the value of the token somehow, perhaps via an environment variable (akin to DUPLICACY_S3_ID and DUPLICACY_S3_SECRET).

When STS is used to generate the credentials then the user must supply all three parameters (accessKey, secretKey and token).

github.com

gilbertchen/duplicacy/blob/d8e13d8d85936e88481f9ced6ca2e6e6e3f6d1d0/src/duplicacy_s3storage.go#L37


	bucket          string
	storageDir      string
	numberOfThreads int
}


// CreateS3Storage creates a amazon s3 storage object.
func CreateS3Storage(regionName string, endpoint string, bucketName string, storageDir string,
	accessKey string, secretKey string, threads int,
	isSSLSupported bool, isMinioCompatible bool) (storage *S3Storage, err error) {


	token := ""


	auth := credentials.NewStaticCredentials(accessKey, secretKey, token)


	if regionName == "" && endpoint == "" {
		defaultRegionConfig := &aws.Config{
			Region:      aws.String("us-east-1"),
			Credentials: auth,
		}


		s3Client := s3.New(session.New(defaultRegionConfig))

For more information on STS
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html

p.bandow · 28 May 2021 12:08

Hi,

I recently added a PR to implement this feature:

https://github.com/gilbertchen/duplicacy/pull/624

akostadinov · 23 February 2022 12:26

Is the project active? I see pull request sitting without review for months.

gchen · 24 February 2022 02:45

There will be a new CLI release next month. At that time I’ll look through all pull requests and merge some of them.

towerbr · 24 February 2022 12:20

Remember this one, which looks like didn’t turned into a PR: