S3Credentials

The object with S3 credentials. If the object is not provided, only public buckets will be accessible. When use_irsa is true, access_key_id and secret_access_key are optional and the pod’s service account will be used for authentication.

Properties

Name

Type

Description

Notes

use_irsa

bool

Enable IAM Roles for Service Accounts (IRSA) to authenticate using the pod’s service account. When enabled, explicit credentials are not required.

[optional] [default to False]

access_key_id

str

AWS access key ID. Not required when using IRSA.

[optional]

secret_access_key

str

AWS secret access key. Not required when using IRSA.

[optional]

session_token

str

AWS session token for temporary credentials.

[optional]

role_arn

str

The Amazon Resource Name (ARN) of IAM Role that will be utilized for accessing the S3 storage. When IRSA is enabled, this role will be assumed from the service account identity (role chaining). When IRSA is disabled, it requires specification of other credentials to identify an identity the role will be associated with.

[optional]

external_id

str

Optional security token for assuming cross-account roles. This is used to prevent the ‘confused deputy’ problem when a third party assumes a role in your account. Only required if the role’s trust policy requires an external ID.

[optional]

Example

from h2ogpte.rest_async.models.s3_credentials import S3Credentials

# TODO update the JSON string below
json = "{}"
# create an instance of S3Credentials from a JSON string
s3_credentials_instance = S3Credentials.from_json(json)
# print the JSON string representation of the object
print(S3Credentials.to_json())

# convert the object into a dict
s3_credentials_dict = s3_credentials_instance.to_dict()
# create an instance of S3Credentials from a dict
s3_credentials_from_dict = S3Credentials.from_dict(s3_credentials_dict)