how to use y-sweet server with AWS s3 auth with IAM role?

[jklee84]

Thanks for your huge effort.
I tried using y-sweet with S3, and in my environment, only IAM role authentication is accepted.

How can I use the y-sweet server with AWS S3 authentication via IAM role?
Can I get any advice?

[paulgb]

Hi @jklee84, the Y-Sweet server itself is not capable of temporary IAM credential refreshing, but you could generate temporary credentials (with AssumeRole) and pass them into the Y-Sweet server. AWS limits these tokens to a 12 hour validity period, so you would have to restart the server with new credentials every 12 hours. Clients will reconnect automatically, so this restart could be done with minimal disruption.