Packages
ex_aws
2.2.1
2.7.0
2.6.1
2.6.0
2.5.11
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.0
1.0.0-rc.4
1.0.0-rc.3
1.0.0-rc.1
1.0.0-beta3
1.0.0-beta2
1.0.0-beta1
1.0.0-beta0
0.5.0
0.4.19
0.4.18
0.4.17
0.4.15
0.4.14
0.4.13
0.4.11
0.4.10
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.1
0.3.0
0.2.0
0.1.2
0.1.1
0.1.0
0.0.5
0.0.4
0.0.3
AWS client for Elixir. Currently supports Dynamo, DynamoStreams, EC2, Firehose, Kinesis, KMS, Lambda, RRDS, Route53, S3, SES, SNS, SQS, STS and others.
Current section
Files
Jump to
Current section
Files
lib/ex_aws/instance_meta.ex
defmodule ExAws.InstanceMeta do
@moduledoc false
# Provides access to the AWS Instance MetaData
# http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
# AWS InstanceMetaData URL
@meta_path_root "http://169.254.169.254/latest/meta-data"
# Endpoint for ECS tasks role credentials
# https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html
@task_role_root "http://169.254.170.2"
def request(config, url) do
case config.http_client.request(:get, url, "", [], http_opts()) do
{:ok, %{status_code: 200, body: body}} ->
body
{:ok, %{status_code: status_code}} ->
raise """
Instance Meta Error: HTTP response status code #{inspect(status_code)}
Please check AWS EC2 IAM role.
"""
error ->
raise """
Instance Meta Error: #{inspect(error)}
You tried to access the AWS EC2 instance meta, but it could not be reached.
This happens most often when trying to access it from your local computer,
which happens when environment variables are not set correctly prompting
ExAws to fallback to the Instance Meta.
Please check your key config and make sure they're configured correctly:
For Example:
```
ExAws.Config.new(:s3)
ExAws.Config.new(:dynamodb)
```
"""
end
end
def instance_role(config) do
ExAws.InstanceMeta.request(config, @meta_path_root <> "/iam/security-credentials/")
end
def task_role_credentials(config) do
case System.get_env("AWS_CONTAINER_CREDENTIALS_RELATIVE_URI") do
nil ->
nil
uri ->
ExAws.InstanceMeta.request(config, @task_role_root <> uri)
|> config.json_codec.decode!
end
end
def instance_role_credentials(config) do
ExAws.InstanceMeta.request(
config,
@meta_path_root <> "/iam/security-credentials/#{instance_role(config)}"
)
|> config.json_codec.decode!
end
def security_credentials(config) do
result =
case task_role_credentials(config) do
nil -> instance_role_credentials(config)
credentials -> credentials
end
%{
access_key_id: result["AccessKeyId"],
secret_access_key: result["SecretAccessKey"],
security_token: result["Token"],
expiration: result["Expiration"]
}
end
defp http_opts do
# Certain solutions like kube2iam will redirect instance meta requests,
# we need to follow those redirects.
defaults = [follow_redirect: true]
overrides =
Application.get_env(:ex_aws, :metadata, [])
|> Keyword.get(:http_opts, [])
Keyword.merge(defaults, overrides)
end
end