2023-09-18 20:09:32 +02:00
|
|
|
Enhancement: Allow AWS Assume Role to be used for S3 backend
|
|
|
|
|
|
2024-01-06 21:45:09 +01:00
|
|
|
Previously only credentials discovered via the Minio discovery methods
|
|
|
|
|
were used to authenticate.
|
2023-09-18 20:09:32 +02:00
|
|
|
|
2024-01-06 21:45:09 +01:00
|
|
|
However, there are many circumstances where the discovered credentials have
|
|
|
|
|
lower permissions and need to assume a specific role. This is now possible
|
|
|
|
|
using the following new environment variables.
|
2023-09-18 20:09:32 +02:00
|
|
|
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_ARN
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_SESSION_NAME
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_EXTERNAL_ID
|
2024-01-06 21:45:09 +01:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_REGION (defaults to us-east-1)
|
2023-09-18 20:09:32 +02:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_POLICY
|
2024-01-06 21:45:09 +01:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_STS_ENDPOINT
|
|
|
|
|
|
|
|
|
|
https://github.com/restic/restic/issues/4472
|
|
|
|
|
https://github.com/restic/restic/pull/4474
|
