aws_bucket_access_point¤
This role will create an access point and associates it with the specified s3/aws bucket in the targeted AWS account.
Prerequisites¤
To run this role successfully you must have already installed the AWS CLI.
Also, you need to have AWS user credentials configured via aws configure
command or simply export AWS_ACCESS_KEY_ID
and AWS_SECRET_ACCESS_KEY
environment variables with your corresponding AWS username credentials prior running this role.
Role Variables¤
aws_access_point_name¤
The name you want to assign to this access point.
- Required.
- Environment Variable:
AWS_ACCESS_POINT_NAME
- Default Value:
access-point-c1
aws_access_point_bucket_name¤
The name of the bucket that you want to associate this access point with.
- Required.
- Environment Variable:
COS_BUCKET_NAME
- Default Value: None
aws_access_point_region¤
The region where the bucket is located.
- Required.
- Environment Variable:
AWS_REGION
- Default Value:
us-east-2
aws_access_point_username¤
The AWS account or username who is allowed access to the actions defined in by the access point policy.
By default, the defined aws_access_point_username
will have read-only permissions to the bucket objects through the created access point alias.
- Required.
- Environment Variable:
AWS_ACCESS_POINT_USERNAME
- Default Value: None
Example Playbook¤
After installing the Ansible Collection you can include this role in your own custom playbooks.
- hosts: localhost
vars:
aws_access_point_name: "{{ lookup('env', 'AWS_ACCESS_POINT_NAME') | default('access-point-c1', True) }}"
aws_access_point_bucket_name: "{{ lookup('env', 'COS_BUCKET_NAME') }}"
aws_access_point_region: "{{ lookup('env', 'AWS_REGION') | default('us-east-2', True) }}"
aws_access_point_username: "{{ lookup('env', 'AWS_ACCESS_POINT_USERNAME') }}"
roles:
- ibm.mas_devops.aws_bucket_access_point
Run Role Playbook¤
After installing the Ansible Collection you can easily run the role standalone using the run_role
playbook provided.
export AWS_ACCESS_POINT_NAME=my-aws-access-point
export COS_BUCKET_NAME=my-aws-bucket
export AWS_ACCESS_POINT_USERNAME=my-aws-username
ROLE_NAME=aws_bucket_access_point ansible-playbook ibm.mas_devops.run_role
License¤
EPL-2.0