-
Notifications
You must be signed in to change notification settings - Fork 406
Open
Description
Currently, libsql's bottomless S3 replication feature only accepts AWS credentials through environment variables:
- LIBSQL_BOTTOMLESS_AWS_ACCESS_KEY_ID
- LIBSQL_BOTTOMLESS_AWS_SECRET_ACCESS_KEY
- LIBSQL_BOTTOMLESS_AWS_SESSION_TOKEN (optional)
- LIBSQL_BOTTOMLESS_AWS_DEFAULT_REGION
The implementation does not read from the standard AWS credentials file (~/.aws/credentials) and doesn't support specifying a particular AWS profile.
Problem
This limitation creates several issues:
- It doesn't align with AWS best practices of using credential files and profiles
- It requires users to explicitly set environment variables even when credentials are already configured
- It makes it difficult to use in environments with multiple AWS accounts/roles
- It doesn't leverage the AWS SDK's built-in credential chain capabilities
Proposed Solution
Enhance the AWS credential handling in bottomless S3 replication to:
- Follow the standard AWS SDK credential provider chain
- Add support for reading from ~/.aws/credentials
- Add an optional environment variable to specify which profile to use
- Fall back to environment variables if no profile is specified or found
jeyaram-a
Metadata
Metadata
Assignees
Labels
No labels