Assume IAM role in AWS PHP SDK?

[ondrejmirtes]

Assume IAM role in AWS PHP SDK?

[mnapoli]

For this you can have a look at the serverless.com documentation: https://serverless.com/framework/docs/providers/aws/guide/iam/ Internally Bref uses that framework, so you can do everything that you can do with it using serverless.yml.

[ondrejmirtes]

I know but I worry that AWS PHP SDK will read try reading the access key and secret from somewhere and will not find it there, therefore not letting me query other AWS services.

[mnapoli]

I don't understand you question 🤔

[ondrejmirtes]

JavaScript AWS SDK has this capability: https://docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/loading-node-credentials-lambda.html

There's no capability like this in PHP AWS SDK, at least it's not in the documentation.

[mnapoli]

🤔 have you tried? It should work. AWS defines the access keys in environment variables, those are picked up by the PHP AWS SDK.

The access keys are bearing the role that was assigned to the lambda.

[ondrejmirtes]

Yeah, of course it works, I should have checked first :( I thought that AWS JS SDK contains some "magic sauce" and since AWS does not officially support running PHP in Lambda, it wouldn't be possible. Sorry!

[mnapoli]

No worries :)

All of this definitely needs more documentation!