Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[AWS] aws credential file use for cloud storage authentication #7810

Open
2 tasks done
cafsigjolmos opened this issue Apr 26, 2024 · 0 comments
Open
2 tasks done

[AWS] aws credential file use for cloud storage authentication #7810

cafsigjolmos opened this issue Apr 26, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@cafsigjolmos
Copy link

Actions before raising this issue

  • I searched the existing issues and did not find anything similar.
  • I read/searched the docs

Is your feature request related to a problem? Please describe.

In certain situation public/private key is not allowed for security reasons due to lack of rotation. In those cases authentication against cloud environments is performed via auth-agents. On AWS the agent creates a credential file that is renewed periodically. I have checked the core implementation of cvat and the API for cloud storage supports the keys contained in the credentials file accesskey, secretkey and token but ui does not allow to introduce those parameters or environment variables containing those parameters.

Describe the solution you'd like

Is it possible to support credential file path ingest to authenticate AWS bucket? That would add greater security measures and allow more users as the public/private keys are starting to be considered less secure by regulations :(

Describe alternatives you've considered

Full cloud host for server and storage in same VPC is other option but the budget is too expensive for my capabilities

Additional context

No response

@cafsigjolmos cafsigjolmos added the enhancement New feature or request label Apr 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant