2024-07-23 00:19:22 +02:00
|
|
|
Enhancement: Support AWS Assume Role for S3 backend
|
2023-09-18 12:09:32 -06:00
|
|
|
|
2024-01-06 21:45:09 +01:00
|
|
|
Previously only credentials discovered via the Minio discovery methods
|
|
|
|
|
were used to authenticate.
|
2023-09-18 12:09:32 -06:00
|
|
|
|
2024-01-06 21:45:09 +01:00
|
|
|
However, there are many circumstances where the discovered credentials have
|
|
|
|
|
lower permissions and need to assume a specific role. This is now possible
|
2024-07-23 00:19:22 +02:00
|
|
|
using the following new environment variables:
|
2023-09-18 12:09:32 -06:00
|
|
|
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_ARN
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_SESSION_NAME
|
|
|
|
|
- RESTIC_AWS_ASSUME_ROLE_EXTERNAL_ID
|
2024-01-06 21:45:09 +01:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_REGION (defaults to us-east-1)
|
2023-09-18 12:09:32 -06:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_POLICY
|
2024-01-06 21:45:09 +01:00
|
|
|
- RESTIC_AWS_ASSUME_ROLE_STS_ENDPOINT
|
|
|
|
|
|
|
|
|
|
https://github.com/restic/restic/issues/4472
|
|
|
|
|
https://github.com/restic/restic/pull/4474
|
