imbi-plugin-aws

AWS provider for Imbi under Plugin Architecture v3. The package ships a single AWSPlugin (slug aws) that backs an AWS Integration with three capabilities from one credential blob.

Capabilities

This package ships one Plugin, discovered by the imbi-common registry via the imbi_plugin_* naming convention (module-level PLUGIN attribute; no imbi.plugins entry points).

Capability Contract Backing service
identity IdentityCapability IAM Identity Center (device flow)
logs LogsCapability CloudWatch Logs Insights
configuration ConfigurationCapability SSM Parameter Store

The identity capability federates each Imbi user into AWS via IAM Identity Center (formerly AWS SSO) and mints short-lived STS credentials per call. It is project_scoped=False (Integration-wide) and default_enabled=True — for AWS, identity is the credential mechanism. The logs and configuration capabilities set requires_identity=True and consume those STS credentials transparently.

Manifest shape

Integration-level (declared once, read from ctx.integration_options):

  • region — default AWS region for every capability; a per-environment AwsAccount.default_region overrides it.
  • default_role_name — IAM role assumed when a per-environment AwsAccount binding does not specify one.

Credentials (the only credential declaration, IAM IC auto-managed): client_id, client_secret, client_scopes.

Capability options (read from ctx.capability_options):

  • identity: start_url (required), default_account_id.
  • logs: log_group_names (required), base_filter, message_field, timestamp_field, level_field, poll_interval_ms, timeout_seconds.
  • configuration: path_prefix (required), kms_key_id, timeout_seconds.

Identity consumption contract

When the identity capability's materialize() runs (host-side, before a data capability's handler), it calls GetRoleCredentials against the IAM IC Portal API and returns short-lived STS keys in IdentityCredentials.extra:

IdentityCredentials(
    access_token=<unchanged IAM IC token>,
    extra={
        'aws_access_key_id':     'AKIA...',
        'aws_secret_access_key': '...',
        'aws_session_token':     '...',
        'aws_region':            'us-east-1',
        'aws_account_id':        '111111111111',
    },
)

The host attaches this to PluginContext.identity; the logs and configuration capabilities read the five well-known keys from ctx.identity.extra via aws_session.resolve_credentials(). The account and role are resolved per environment via (:Environment)-[:MAPS_TO]->(:AwsAccount), falling back to the Integration-level default_role_name and region.

License

BSD-3-Clause.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (2.23.0)

Owner

PyPI data
Data sourced directly from PyPI's database.

Credits

Author: Gavin M. Roy

License

BSD-3-Clause

Requires

Python >=3.14

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

imbi_plugin_aws-2.13.0.tar.gz (155.1 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

imbi_plugin_aws-2.13.0-py3-none-any.whl (37.6 kB view details)

Uploaded Python 3

File details

Details for the file imbi_plugin_aws-2.13.0.tar.gz.

File metadata

  • Download URL: imbi_plugin_aws-2.13.0.tar.gz
  • Upload date:
  • Size: 155.1 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for imbi_plugin_aws-2.13.0.tar.gz
Algorithm Hash digest
SHA256 4c5b0f9df8a77f48d0cfdfa049d1a6bf723821ff6e1bac17aef46e180ef059fe
MD5 816622965b8da5e1adfe7010f1641999
BLAKE2b-256 5e3c3b22f85a92fc790550c810f17f3275f4d53c92c50b7f1c544c6e075227e7

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_plugin_aws-2.13.0.tar.gz:

Publisher: publish.yml on AWeber-Imbi/imbi-plugin-aws

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file imbi_plugin_aws-2.13.0-py3-none-any.whl.

File metadata

File hashes

Hashes for imbi_plugin_aws-2.13.0-py3-none-any.whl
Algorithm Hash digest
SHA256 03efd5f19c3cf9e7f77eed2398d6725d3a8bade65b851b4669b4636a7f829a67
MD5 64e17a1734a6ac771470b13e7cec60a3
BLAKE2b-256 99010f58f592968f45aa385455f0eec8b7572ba613b7783eab77c0f052442c45

See more details on using hashes here.

Provenance

The following attestation bundles were made for imbi_plugin_aws-2.13.0-py3-none-any.whl:

Publisher: publish.yml on AWeber-Imbi/imbi-plugin-aws

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page