darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-08-17 04:59:37 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #694 from GSA/switch-to-fips

Browse Source 
Switch to using FIPS-enabled endpoints
This commit is contained in:
Steven Reilly
2023-08-14 17:13:52 -04:00
committed by GitHub
parent 1a34c5f6ce 97dff0a92c
commit bc04bccdca
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
app/s3_client/__init__.py
View File

@@ -1,7 +1,18 @@
import botocore import botocore
from boto3 import Session from boto3 import Session
from botocore.config import Config
from flask import current_app from flask import current_app
AWS_CLIENT_CONFIG = Config(
# This config is required to enable S3 to connect to FIPS-enabled
# endpoints. See https://aws.amazon.com/compliance/fips/ for more
# information.
s3={
'addressing_style': 'virtual',
},
use_fips_endpoint=True
)
def get_s3_object( def get_s3_object(
bucket_name, bucket_name,
@@ -11,8 +22,12 @@ def get_s3_object(
region, region,
): ):
# To inspect contents: obj.get()['Body'].read().decode('utf-8') # To inspect contents: obj.get()['Body'].read().decode('utf-8')
session = Session(aws_access_key_id=access_key, aws_secret_access_key=secret_key, region_name=region) session = Session(
s3 = session.resource('s3') aws_access_key_id=access_key,
aws_secret_access_key=secret_key,
region_name=region
)
s3 = session.resource('s3', config=AWS_CLIENT_CONFIG)
obj = s3.Object(bucket_name, filename) obj = s3.Object(bucket_name, filename)
return obj return obj