######################## Akeyless Python Cloud Id ########################

Retrieves cloud identity

Currently, AWS, GCP, Azure and Alibaba Cloud are supported. In order to get cloud identity you should import this package and call the relevant method per your chosen CSP:

• AWS: "generate" (If no aws access id/key and token are provided they will be retrieved automatically from the default session.)
• GCP: "generateGcp"
• Azure: "generateAzure"
• Alibaba Cloud: "generateAlibaba" (If no access key/secret are provided they will be retrieved from environment variables or an ECS RAM role.)

Minimum requirements

• Python 3.5+
• urllib3 >= 1.15
• requests

Optional Dependencies

• boto3
• google-auth
• azure-identity

Installation

.. code:: pip install akeyless-python-cloud-id

AWS:

To install with AWS:

.. code::

pip install akeyless-python-cloud-id[aws]

The following additional packages will be installed:

• boto3

GCP:

To install with GCP:

.. code::

pip install akeyless-python-cloud-id[gcp]

The following additional packages will be installed:

• google-auth

To install with Azure:

.. code::

pip install akeyless-python-cloud-id[azure]

The following additional packages will be installed:

• azure-identity

Usage

Such code can be used, for example, in order to retrieve secrets from Akeyless as part of AWS Code Pipeline:

.. code:: pip install git+https://github.com/akeylesslabs/akeyless-python-sdk

import akeyless_api_gateway
from akeyless_cloud_id import CloudId

configuration = akeyless_api_gateway.Configuration()
configuration.host="http://<api-gateway-host>:<port>"

api_instance = akeyless_api_gateway.DefaultApi(akeyless_api_gateway.ApiClient(configuration))

cloud_id = CloudId()
# for AWS use:
id = cloud_id.generate()
# For Azure use:
id = cloud_id.generateAzure()
# For GCP use:
id = cloud_id.generateGcp()
# For Alibaba Cloud use:
id = cloud_id.generateAlibaba()

access_id = event['CodePipeline.job']['data']['actionConfiguration']['configuration']['UserParameters']

auth_response = api_instance.auth(access_id, access_type="aws_iam", cloud_id=id)
token = auth_response.token

postgresPassword = api_instance.get_secret_value("PostgresPassword", token)

License

This SDK is distributed under the Apache License, Version 2.0_ see LICENSE.txt for more information.

.. _Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0