Download an object from S3 in a run document

0

We have a role attached to a managed instance for ssm. It has rights to a private S3 bucket and it's contents.

Do I have to do anything special in order to download a file using it's S3 url? Do I have to state in the run document to assume the role, or is it already implied?

demandé il y a 5 ans1139 vues
1 réponse
0

Figured this out. The managed instance had the correct role, I just needed to install the awscli tools first, set the path so that powershell could use them, then issue the standard aws s3 cp command.

Part of my run document looks like this. I'm using chocolatey to get the awscli tools installed.
Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
choco install awscli -y
setx PATH "%PATH%;C:\Program Files\Amazon\AWSCLI"
aws s3 cp s3://yadayadayada c:\
then a line to remove the cli tool when done
choco uninstall awscli -y

Too bad the ssm agent doesn't come with aws tools already installed for this kind of stuff, but that's ok.

Edited by: kleinberger on Feb 13, 2019 2:13 PM

répondu il y a 5 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions