Allow reading S3 credentials from AWS Profile :: Support Forum

madman6886 Guest

Allow reading S3 credentials from AWS Profile

2022-07-12 17:26

Hello,

It would be awesome if there could be a setting (raw option) to specify an existing AWS Profile to be used for a specific site. I can kind of do that now by setting AWS_PROFILE environment variable and then launching the WinSCP, but I would prefer to have multiple sites referencing different profiles. Let's say there would be S3Profile raw option set in the site causing the WinSCP look up the credentials for that specific profile.

Thank you,
Alex

Reply with quote

martin◆ Site Admin
Joined:: 2002-12-10
Posts:: 41,441
Location:: Prague, Czechia

Re: Allow reading S3 credentials from AWS Profile

2022-07-14

Thanks for your suggestion.
We will see, if more people ask for this.

Reply with quote

nclemons
Joined:: 2022-06-16
Posts:: 2

2022-08-23 19:49

This would be very helpful. In our AWS account, all of our IAM accounts have MFA required; the only thing that we can do with our base account is to register an MFA, change our password, or retrieve STS tokens using our MFA. I have a script that logs into each of our accounts and generates profile entries with the STS credentials; for example, if I had a credentials file that looked like this:

[devaws]
region = us-east-1
aws_access_key_id = REDACTED1
aws_secret_access_key = REDACTED2
 
[moxieawsprod]
region = us-east-1
aws_access_key_id = REDACTED3
aws_secret_access_key = REDACTED4

After running the script, it would look like this:

[devaws]
region = us-east-1
aws_access_key_id = REDACTED1
aws_secret_access_key = REDACTED2
 
[moxieawsprod]
region = us-east-1
aws_access_key_id = REDACTED3
aws_secret_access_key = REDACTED4
 
[devawsmfa]
region = us-east-1
aws_access_key_id = REDACTED5
aws_secret_access_key = REDACTED6
aws_session_token = REDACTED7
 
[moxieawsprodmfa]
region = us-east-1
aws_access_key_id = REDACTED8
aws_secret_access_key = REDACTED9
aws_session_token = REDACTED10

It would be great to be able to say "this S3 account should use the profile 'moxieawsprodmfa'".

Reply with quote