mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-04-29 06:36:30 +08:00
fae7cd138d
This commit adds support for assuming an IAM role when performing S3 operations. When `s3_role_arn` is configured alongside static access keys, Discourse will use AWS STS AssumeRole to obtain temporary, scoped credentials instead of using the static keys directly. Two new settings are introduced: 1. `s3_role_arn`: The ARN of the IAM role to assume. 2. `s3_role_session_name`: An optional session name which falls back to the server hostname when blank. Both are available as GlobalSettings (env vars) and SiteSettings (admin UI). The feature is entirely opt-in, when `s3_role_arn` is blank everything behaves exactly as before. Co-authored-by: ducks <868959+ducks@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| adapter_factory.rb | ||
| aws_media_convert_adapter.rb | ||
| base_adapter.rb | ||
