node-red-contrib-aws icon indicating copy to clipboard operation
node-red-contrib-aws copied to clipboard

Feature request: Allow credentials to be supplied by ECS container

Open bonnydeal opened this issue 4 years ago • 3 comments
trafficstars

When running a node red instance inside ECS, it would be handy to use the ECS task credentials rather than setting up a credentials node.

https://docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/setting-credentials-node.html

bonnydeal avatar Sep 07 '21 10:09 bonnydeal

Sounds reasonable, will investigate when time permits

Daniel-t avatar Sep 13 '21 10:09 Daniel-t

I was also wondering if we could rely on IAM Roles to execute the AWS API calls, in my case I'm trying to run node-red in a lambda and use IAM Role of the lambda to send a message SQS. I'll take a look, and if possible, I'll raise a PR so we can start the discussion.

loe-lobo avatar Oct 12 '22 15:10 loe-lobo

I was also wondering if we could rely on IAM Roles to execute the AWS API calls, in my case I'm trying to run node-red in a lambda and use IAM Role of the lambda to send a message SQS. I'll take a look, and if possible, I'll raise a PR so we can start the discussion.

From a quick review, during the execution of a Lambda the env vars: AWS_ACCESS_KEY, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN are available, and they are generated from the Execution role attached to the lambda. Which means we can use those vars on configuration, no need to change the code. 👍

loe-lobo avatar Oct 12 '22 16:10 loe-lobo