awscreds-cookbook

Loads credentials from chef vault and creates an aws config file (.ini format) from the loaded credentials. Supports multiple profiles and alternate locations for the credentials file.

##Requirements

Platforms

Any platform supported by Chef

Chef

Chef 12.1+

Cookbooks

none

Attributes

node['awscreds']['filename'] - The name of the file to create that contains the credentials. Defaults to /root/.aws/config.
node['awscreds']['vault_name'] - The name of the data bag/vault that will contain the credentials. Defaults to 'awscreds'.
node['awscreds']['vault_search'] - A search query to execute that will grab the items from the vault. Defaults to '*:*' (i.e. grab every item in the vault). You can change this so only some of the credentials stored in the vault are put in the credentials file.
node['awscreds']['default_profile'] - The AWS credentials file contains a special profile called 'default' that is used by tools when no profile name is specified. This setting allows you to specify which profile (i.e. which vault item) becomes the default profile in the file. This defaults to a profile/vault item called 'default'.

Usage

Create a chef vault item with your credentials in:

knife vault create awscreds default -S 'role:some-role' -A 'admin1,admin2'

The content should look like the following:

{
  "id": "default",
  "aws_access_key_id": "AAAAAAAAAAAAAAAAAAAA",
  "aws_secret_access_key": "ABC123abc123ABC123abc123ABC123abc123ABC1"
}

The vault item ID will correspond to the AWS profile used in the config file. An ID of 'default' (or the value of the 'default_profile' attribute if you have changed it) will be the default item in the file, while other IDs will be added as specific profiles.

awscreds::default

Include awscreds in your node's run_list:

{
  "run_list": [
    "recipe[awscreds::default]"
  ]
}

##License & Authors

Author: Cookbook Engineering Team (cookbooks@chef.io)

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.