Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Detect DynamoDB region from EC2 instance profile #6826

Open
ghost opened this issue Jun 4, 2019 · 0 comments
Open

Detect DynamoDB region from EC2 instance profile #6826

ghost opened this issue Jun 4, 2019 · 0 comments

Comments

@ghost
Copy link

ghost commented Jun 4, 2019

Is your feature request related to a problem? Please describe.
We deploy Vault to two different regions in EC2 and use the DynamoDB backend in both regions. Each Vault instance has its own table that is in the same region. The tables are configured the same in each region and they both have the same name. As a result, the Vault configuration file is the same in both regions except for the region property required by the DynamoDB storage configuration. Maintaining two separate config files, one for each region, that only differ by one line seems unnecessary when the region information can be obtained dynamically.

Describe the solution you'd like
It would be great if Vault would use the EC2 instance metadata could be used to dynamically determine the default AWS region when one isn't explicitly specified. It looks like the same functionality was added to the AWS KMS seal back in January (Pull Request 6025). The changes to the Dynamo backend code are probably very similar.

Describe alternatives you've considered
We have a script that runs prior to running Vault to ensure the correct, region-specific configuration file will be loaded by Vault.

Explain any additional use-cases
N/A

Additional context
N/A

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant