AWS auth v4 plugin for HTTPie.
Project description
httpie-aws-authv4
AWS / Amazon Signature v4 Signing Process authentication plugin for HTTPie.
Installation
$ pip install --upgrade httpie-aws-authv4
You should now see aws4
under --auth-type / -A
in $ http --help
output.
Usage
Credentials in default profile/environment variables/instance profile
This authentication plugin looks for credentials in the same precedence that the AWS CLI tool does.
$ http --auth-type aws4 https://asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com/dev/test
Specify credentials on the CLI
$ http --auth-type aws4 --auth ACCESSKEYXXX:AWSSECRETKEYXXX https://asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com/dev/test
Specify credentials profile on the CLI
You can specify an another profile than the default profile by providing the keyword profile
instead of the access key.
$ http --auth-type aws4 --auth profile:XXX https://asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com/dev/test
Specify the endpoint
If for some reason you are not hitting the AWS endpoint directly (common with API Gateway), you will need to specify the AWS provided endpoint on the CLI. This is used to determine the service and region values required for the signature process.
$ http --auth-type aws4 --auth asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com https://api.awesomeservice.net/dev/test
Specify credentials and endpoint
$ http --auth-type aws4 --auth ACCESSKEYXXX:AWSSECRETKEYXXX:asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com https://api.awesomeservice.net/dev/test
Specify credentials profile and endpoint
$ http --auth-type aws4 --auth profile:XXX:asdf123a9sas.execute-api.ap-southeast-2.amazonaws.com https://api.awesomeservice.net/dev/test
Calling AWS services that require extra information
Many AWS services do not require any extra information to be passed other than the URL, such as the following call to the S3 service which will list all S3 Buckets in the given AWS account:
http -A aws4 s3.us-east-1.amazonaws.com
However, some AWS services will require extra information to be passed using query string parameters. By default, httpie
passes
extra parameters as a JSON body. httpie
can be told to pass extra parameters as form fields using the -f
flag like so:
$ http -f -A aws4 ec2.us-east-1.amazonaws.com Action=DescribeVpcs Version=2015-10-01
where the Action and Version parameters were passed to the EC2 service to call the DescribeVpcs API.
Alternatively instead of using the -f
flag, ==
can be used for each parameter like so:
$ http -A aws4 ec2.us-east-1.amazonaws.com Action==DescribeVpcs Version==2015-10-01
Credits
All of the heavy lifting (the signing process) is handled by aws-requests-auth
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.