restic/changelog/unreleased/issue-4472

19 lines
679 B
Plaintext
Raw Normal View History

2023-09-18 18:09:32 +00:00
Enhancement: Allow AWS Assume Role to be used for S3 backend
2024-01-06 20:45:09 +00:00
Previously only credentials discovered via the Minio discovery methods
were used to authenticate.
2023-09-18 18:09:32 +00:00
2024-01-06 20:45:09 +00:00
However, there are many circumstances where the discovered credentials have
lower permissions and need to assume a specific role. This is now possible
using the following new environment variables.
2023-09-18 18:09:32 +00:00
- RESTIC_AWS_ASSUME_ROLE_ARN
- RESTIC_AWS_ASSUME_ROLE_SESSION_NAME
- RESTIC_AWS_ASSUME_ROLE_EXTERNAL_ID
2024-01-06 20:45:09 +00:00
- RESTIC_AWS_ASSUME_ROLE_REGION (defaults to us-east-1)
2023-09-18 18:09:32 +00:00
- RESTIC_AWS_ASSUME_ROLE_POLICY
2024-01-06 20:45:09 +00:00
- RESTIC_AWS_ASSUME_ROLE_STS_ENDPOINT
https://github.com/restic/restic/issues/4472
https://github.com/restic/restic/pull/4474