1662926 - AWS user for Docere CI

Status: RESOLVED FIXED

(Data Platform and Tools Graveyard :: Operations, task, P5)

Description

[Tim Smith (inactive) 👨‍🔬 [:tdsmith]]

Can you help me provision credentials with read/write access to an S3 bucket for CI?

The CI is for a website generator the data science team uses to publish reports: https://github.com/mozilla/docere

The bucket it needs access to is docere-test. It lives in the cloudservices-aws-dev project. I tried to create a user with limited policy access to the bucket but I didn't have permissions.

Thanks!

Comment 1

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

I suspect that since this concerns data science, the right place for this is in the data-ops' team queue, so I'll cc :jason on this.

Having said that though, can you confirm that this is an app that you've created in -dev but is being used for -prod purposes?

Comment 2

[Tim Smith (inactive) 👨‍🔬 [:tdsmith]]

Having said that though, can you confirm that this is an app that you've created in -dev but is being used for -prod purposes?

I'm not sure about any single clause of that (it's less complex than "an app" suggests; it serves some static HTML -- I didn't create it, but I'm trying to pick up maintenance -- and I'm not sure what -prod purposes are; if this fell over, a few internal users would notice within a day or two. There's no SLA) but if you see a problem I would be happy to learn more about what should have happened and whether we should be planning to do something differently.

Comment 3

[Jason Thomas [:jason]]

I've communicated the AWS credentials via google drive.

The user has been configured with IAM permissions similar to https://docs.travis-ci.com/user/deployment/s3/#s3-acl-via-option