You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
49 lines
1.8 KiB
49 lines
1.8 KiB
5 years ago
|
#!/usr/bin/env python
|
||
|
|
# -*- coding: utf-8 -*-
|
||
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||
|
|
# you may not use this file except in compliance with the License.
|
||
|
|
# You may obtain a copy of the License at
|
||
|
|
#
|
||
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||
|
|
#
|
||
|
|
# Unless required by applicable law or agreed to in writing, software
|
||
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
|
|
# See the License for the specific language governing permissions and
|
||
|
|
# limitations under the License.
|
||
|
|
|
||
|
|
import logging
|
||
|
|
|
||
|
|
import boto3
|
||
|
|
from boto3.session import Session
|
||
|
|
from botocore.session import get_session
|
||
|
|
|
||
|
|
from client_grants import ClientGrantsCredentialProvider
|
||
|
|
|
||
|
|
boto3.set_stream_logger('boto3.resources', logging.DEBUG)
|
||
|
|
|
||
|
|
bc_session = get_session()
|
||
|
|
bc_session.get_component('credential_provider').insert_before(
|
||
|
|
'env',
|
||
|
|
ClientGrantsCredentialProvider('NZLOOFRSluw9RfIkuHGqfk1HFp4a',
|
||
|
|
'0Z4VTG8uJBSekn42HE40DK9vQb4a'),
|
||
|
|
)
|
||
|
|
|
||
|
|
boto3_session = Session(botocore_session=bc_session)
|
||
|
|
s3 = boto3_session.resource('s3', endpoint_url='http://localhost:9000')
|
||
|
|
|
||
|
|
with open('/etc/hosts', 'rb') as data:
|
||
|
|
s3.meta.client.upload_fileobj(data,
|
||
|
|
'testbucket',
|
||
|
|
'hosts',
|
||
|
|
ExtraArgs={'ServerSideEncryption': 'AES256'})
|
||
|
|
|
||
|
|
# Upload with server side encryption, using temporary credentials
|
||
|
|
s3.meta.client.upload_file('/etc/hosts',
|
||
|
|
'testbucket',
|
||
|
|
'hosts',
|
||
|
|
ExtraArgs={'ServerSideEncryption': 'AES256'})
|
||
|
|
|
||
|
|
# Download encrypted object using temporary credentials
|
||
|
|
s3.meta.client.download_file('testbucket', 'hosts', '/tmp/hosts')
|