Has anyone managed to use IAM Roles with S3 storage?

[LeonardoPachalski]

Hi everyone,

I'm trying to deploy Gokapi on AWS EC2 with S3 storage, and I'm struggling to get it working with IAM Instance Profiles/Roles instead of static access keys.
Looking at the code in internal/configuration/setup/Setup.go, it seems like the credentials are always created as static credentials.
Is anyone else running into this? Would others find IAM Role support useful for AWS deployments?

[Forceu]

Thanks for your feedback! Personally I haven't used the IAM roles, which is probably the reason why only static keys are implemented. What advantages would using IAM roles have over static API keys?

[LeonardoPachalski]

Hi Forceu. IAM Roles use temporary credentials that auto-rotate every few hours and expire automatically, vs static keys that live forever. No secrets to store/manage, and it's AWS's recommended security practice. The AWS SDK already supports this - we'd just make the keys optional so it uses Instance Profiles/Task Roles when available. Fully backward compatible. Best.