gbloquel/boto-sts-assume-role

This is a boto(2)/boto3 wrapper that handles STS Assume Role.

botosts - AWS Python SDK wrapper

botosts is a wrapper on top of boto(2) and boto3. It handles STS Assume Role and return the appropriated boto2 or boto3 client, fully initialized.

Key features

• Compatible with boto2 and boto3
• Can handle a standard client (using boto default credentials) or can STS Assume Role to another IAM Role account.
• Compatible with all AWS Partitions: AWS Standard, AWS China, AWS US Gov
• Uses heuristic endpoint option which allows to have latest AWS Regions (Paris, London, etc.) available with a boto2 client.

Requirements

• Python 2.7+

Installation

With pip (in a virtualenv or not)

pip install git+ssh://github.com/claranet/boto-sts-assume-role

Examples

A boto2 client, with standard credentials (current IAM profile), connected to S3:

from botosts.aws_connection import AWSConnection

cloud_connection = AWSConnection()
client = cloud_connection.get_connection(region, ["s3"])

A boto3 client, with an assume role for another account, connected to EC2 autoscale:

from botosts.aws_connection import AWSConnection

cloud_connection = AWSConnection(
    assumed_account_id=args.assumed_account_id,
    assumed_role_name=args.assumed_role_name,
    assumed_region_name=args.region
)
client = cloud_connection.get_connection(region, ['autoscaling'], boto_version='boto3')

A boto2 client, in AWS China, connected to EC2 ELB:

from botosts.aws_connection import AWSConnection
cloud_connection = AWSConnection(
    config={'aws_partitions': ['aws-cn']}
)
client = cloud_connection.get_connection('cn-north-1', ['ec2', 'elb'], boto_version='boto2')

License

This SDK is distributed under the Apache License, Version 2.0, see LICENSE and NOTICE for more information.