awscli-plugin-granica

This AWS CLI plugin provides an authentication and authorization solution for accessing Granica securely using the AWS CLI.

It uses the standard AWS CLI configuration to store the URL for accessing Granica. Active profiles disable regular S3 request signing, and instead provide a presigned STS GetCallerIdentity API call to securely authenticate requests using Granica.

Prerequisites

The minimum supported version of Python is version 3.

awscli must be installed. e.g. pip3 install awscli --user

Installation

To install the plugin package, run: python3 -m pip install awscli-plugin-granica --user.

Configuration

To configure the plugin after it has been installed, use aws configure:

aws configure set plugins.granica awscli-plugin-granica
aws [--profile PROFILE] configure set granica_custom_domain <Granica custom domain>
aws [--profile PROFILE] configure set region <Region>

For example, to activate a Granica service using an internal load balancer hosted at https://quicksilver.us-east-1.mydomain.mycompany.com for the staging AWS profile, run:

aws --profile staging configure set granica_custom_domain mydomain.mycompany.com
aws --profile staging configure set region us-east-1

AWS CLI v2

This plugin has been tested for compatibility with AWS CLI version 2, but please take note of the [plugins] configuration breaking changes. In particular, you will need to add a block like:

[plugins]
cli_legacy_plugin_path = /Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages

in your ~/.aws/config file for the plugin registration to succeed.

To find the correct location for cli_legacy_plugin_path after installing the plugin, run:

pip3 show awscli-plugin-granica | grep Location: