Support for IAM auth?

[mausch]

Expected behavior

I'd like to be able to say mc config host add s3 https://s3.amazonaws.com and have mc use IAM auth instead of access keys.
I'd like to see documentation for IAM auth if it's supported, or otherwise an item on some FAQ saying that it's not supported. I can't seem to find any of this :-(

Actual behavior

When running the command above I get <ERROR> Incorrect number of arguments for host add command.

mc version

RELEASE.2019-07-09T23-57-06Z

[harshavardhana]

We don't support IAM auth yet @mausch there is a plan in future we will though.

[mausch]

Thanks for the quick reply! it seems that support in the SDK has been implemented quite some time ago: minio/minio-go#643

[harshavardhana]

Thanks for the quick reply! it seems that support in the SDK has been implemented quite some time ago: minio/minio-go#643

SDKs have implemented a long time ago. mc requires some CLI changes to make it user-friendly

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 21 days if no further activity occurs. Thank you for your contributions.

[kgrimes2]

Can we reopen this? Are there any suitable workarounds? Our team really needs it

[harshavardhana]

Can we reopen this? Are there any suitable workarounds? Our team really needs it

@kgrimes2 you should get the keys from the IAM endpoints and then pass them to mc as

MC_HOST_iam=http://<access_key>:<secret_key>:<session_token>@s3-server:port/ mc ls iam/mybucket

[ztaylor54]

@harshavardhana Is this documented anywhere in MinIO docs? I have yet to stumble upon it.

[harshavardhana]

@harshavardhana Is this documented anywhere in MinIO docs? I have yet to stumble upon it.

https://github.com/minio/mc/blob/master/docs/minio-client-complete-guide.md#specify-temporary-host-configuration-through-environment-variable

Something like this