Search code examples
amazon-web-servicesamazon-ecrassume-rolecodefresh

Codefresh: How to use assume role in docker registry while adding ecr?

Codefresh takes only 2 params: Access key Secret key

I've got assume role to work on local but it requires aws config file etc

Any ideas how to use assume role to add ecr to docker registry in Codefresh? Or how to get Access key and Secret key from assume role?

Thanks a lot

Solution

  • Or how to get Access key and Secret key from assume role?

    Generally you use STS service for that. The service has assume-role API call. The call:

    Returns a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to.

    However, the credentials (access key ID, secret access key, and a security token) that you get are temporary. They can last from 15 min to max 12 hours (depending on the role settings).