Infra
/
lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge branch 'master' into moto-upgrade

This commit is contained in:
Hossein Shafagh 2021-03-03 15:36:58 -08:00 committed by GitHub
parent 6f197b255f b118fbbc3b
commit 3062d31800
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/administration.rst
View File

@ -209,6 +209,11 @@ Basic Configuration
in the UI. When set to False (the default), the certificate delete API will always return "405 method not allowed" in the UI. When set to False (the default), the certificate delete API will always return "405 method not allowed"
and deleted certificates will always be visible in the UI. (default: `False`) and deleted certificates will always be visible in the UI. (default: `False`)
.. data:: LEMUR_AWS_REGION
:noindex:
This is an optional config applicable for settings where Lemur is deployed in AWS. For accessing regionalized
STS endpoints, LEMUR_AWS_REGION defines the region where Lemur is deployed.
Certificate Default Options Certificate Default Options
--------------------------- ---------------------------

6
lemur/plugins/lemur_aws/sts.py
View File

@ -20,6 +20,12 @@ def sts_client(service, service_type="client"):
def decorator(f): def decorator(f):
@wraps(f) @wraps(f)
def decorated_function(*args, **kwargs): def decorated_function(*args, **kwargs):
if current_app.config.get("LEMUR_AWS_REGION"):
deployment_region = current_app.config.get("LEMUR_AWS_REGION")
sts = boto3.client('sts', region_name=deployment_region,
endpoint_url=f"https://sts.{deployment_region}.amazonaws.com/",
config=config)
else:
sts = boto3.client("sts", config=config) sts = boto3.client("sts", config=config)
arn = "arn:aws:iam::{0}:role/{1}".format( arn = "arn:aws:iam::{0}:role/{1}".format(
kwargs.pop("account_number"), kwargs.pop("account_number"),