Support for IAM roles?

[ThrawnCA]

Can this extension rely on IAM roles, instead of requiring a secret key? We're running on AWS EC2, so in theory it should be possible to access S3 without needing any keys.

[ThrawnCA]

My testing suggests that it's entirely possible to create a boto session without providing the access key or secret key, if you're on an appropriately privileged machine; you can just call boto3.client('s3') and you're all set. You can even provide the access key ID and secret key, but set them to None, and boto will be smart enough to ignore them, so uploader.py probably wouldn't need to change.

[ThrawnCA]

Actually, I can see that someone has already forked this extension to add that functionality: https://github.com/bstutsky/ckanext-s3filestore

Is it worth merging those changes back in?

[ThrawnCA]

Bump.

We've actually forked bstutsky/ckanext-s3filestore and fixed some bugs, at qld-gov-au/ckanext-s3filestore. I think the changes are worth considering.