s3sts.py 4.4 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697
  1. #!/usr/bin/env python3
  2. # -*- coding: utf-8 -*-
  3. """
  4. @Copyright (C) ansjer cop Video Technology Co.,Ltd.All rights reserved.
  5. @AUTHOR: ASJRD018
  6. @NAME: AnsjerFormal
  7. @software: PyCharm
  8. @DATE: 2018/11/8 17:30
  9. @Version: python3.6
  10. @MODIFY DECORD:ansjer dev
  11. @file: s3sts.py
  12. @Contact: chanjunkai@163.com
  13. """
  14. def getCredentials():
  15. import boto3
  16. REGION_NAME = 'us-east-1' # e.g
  17. import json
  18. sts = boto3.client(
  19. 'sts',
  20. aws_access_key_id='AKIAIXAA4C3QCK7ZNUOA',
  21. aws_secret_access_key='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',
  22. region_name=REGION_NAME
  23. )
  24. Policy = {"Version": "2012-10-17",
  25. "Statement": [{"Effect": "Allow", "Action": "s3:*", "Resource": ["arn:aws:s3:::ansjerfilemanager/*"]}]}
  26. credentials = sts.get_federation_token(
  27. Name='chanjunkai@163.com', # or any unique text related to user
  28. Policy=json.dumps(Policy),
  29. DurationSeconds=3600,
  30. # minimum is 200 which is enough as token is just for start of request and necessarily need not live throughout the life of the whole upload.
  31. )
  32. print(credentials)
  33. access_key_id = credentials['Credentials']['AccessKeyId']
  34. session_token = credentials['Credentials']['SessionToken']
  35. secret_access_key = credentials['Credentials']['SecretAccessKey']
  36. # getCredentials()
  37. #
  38. # exit()
  39. def getCredentialsTemplate():
  40. import boto3
  41. REGION_NAME = 'us-east-1' # e.g
  42. sts = boto3.client(
  43. 'sts',
  44. aws_access_key_id='AKIAIXAA4C3QCK7ZNUOA',
  45. aws_secret_access_key='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',
  46. region_name=REGION_NAME
  47. )
  48. Policy = {"Version": "2012-10-17", "Statement": [
  49. {"Effect": "Allow", "Action": "s3:*", "Resource": ["arn:aws:s3:::<your-bucket>/<key-folder>/*"]}]}
  50. credentials = sts.get_federation_token(
  51. Name='12132@qq.com', # or any unique text related to user
  52. Policy={},
  53. DurationSeconds=3600,
  54. # minimum is 200 which is enough as token is just for start of request and necessarily need not live throughout the life of the whole upload.
  55. )
  56. access_key_id = credentials['Credentials']['AccessKeyId']
  57. session_token = credentials['Credentials']['SessionToken']
  58. secret_access_key = credentials['Credentials']['SecretAccessKey']
  59. print(credentials)
  60. def test():
  61. print('test')
  62. import boto3
  63. REGION_NAME = 'us-east-1' # e.g
  64. import json
  65. # crd = {'Credentials': {'AccessKeyId': 'ASIA2E67UIMDZEZW7F56', 'SecretAccessKey': '2XE3bxqUlt7RTwojtsOxAQdp25dXlPSOGJr4PJ9l', 'SessionToken': 'FQoGZXIvYXdzEHIaDNE8Ddu2SeUjFQB3ICL7AVZuoryvjuDgFFkNuB81R2tO+jo5xbH3mecUN9SygDRWccfGqUkZZli8h9oF9nxht3LzawpTzR8Xsk3Zcq7hXZ4n69nNjCzO5iRAqNU5OSA5QdS70xcJyGBvMz5QX+QL6T8nTUf0qImvgTgzHl1U7dhPDkpR2TTpuFkoCxPjPDDmljA45TzOzDPkZ9P48njKF0ijJsWKUIJSOOXpixn7QZHE0+WzCrl4OQdr4gyYBDufYQl4Hc/jhG1W40FE9KARRClOFQk01gc8RZR07K26+bDUfLdhT4uBpwZ64xR64VQX0OKVu0e9hjPFEePDheSIwdzS7htJomuF5Vq7KIGuk98F', 'Expiration': datetime.datetime(2018, 11, 9, 1, 38, 25, tzinfo=tzutc())}, 'FederatedUser': {'FederatedUserId': '697864307463:chanjunkai@163.com', 'Arn': 'arn:aws:sts::697864307463:federated-user/chanjunkai@163.com'}, 'PackedPolicySize': 11, 'ResponseMetadata': {'RequestId': 'c4e67d2b-e3b7-11e8-b1b0-bfa03e244fac', 'HTTPStatusCode': 200, 'HTTPHeaders': {'x-amzn-requestid': 'c4e67d2b-e3b7-11e8-b1b0-bfa03e244fac', 'content-type': 'text/xml', 'content-length': '1151', 'date': 'Fri, 09 Nov 2018 00:38:24 GMT'}, 'RetryAttempts': 0}}
  66. crd = {'AccessKeyId': 'ASIA2E67UIMD2KA76ZX3', 'SecretAccessKey': 'HbbZPLKcdr1vh81fUH5M8bGzhobPJ9/7SjOBqLNB', 'SessionToken': 'FQoGZXIvYXdzEOz//////////wEaDOT/uGl4KlSpHcQk1SL7AZW+0TxQFvhBp+UtPACl1L7WXftaHv7R5AozWYO/MmDHU1IDSQw0JNbK6v5xhOtxgdE2aSmN0UGq9g5SyI5+EX8xDrwuSg6b8fgUJ6Z9N62xO1e5qnY5wYI1R6xbmRHqCfIN+uBg/PzeKKcSLiLfK49nPbxTsgXn3drW+pQ4kjvyTDQlNVqwCk61eNTrt+WIqKz7e71BUV5I0vlERivyknWve5uoBrBGesYRSxAYT5/9MqvvGMc8k8lfDStlJOwANPqcXFyQFg8heU3pnenjJZOQ+vMHzEHxL7yZseq6SoadjkWT6xm4VyDLGPGr4IdUaoP1V9FFDdGbVHwzKM6crt8F'}
  67. # s3_resource = boto3.resource(
  68. s3_resource = boto3.client(
  69. 's3',
  70. aws_access_key_id=crd['AccessKeyId'],
  71. aws_secret_access_key=crd['SecretAccessKey'],
  72. aws_session_token=crd['SessionToken'],
  73. )
  74. response = s3_resource.put_object(
  75. Body='xxxxx',
  76. Key='test',
  77. Bucket='ansjerfilemanager',
  78. # Expires=datetime()
  79. )
  80. # response = s3_resource.get_object(
  81. # Bucket='ansjerfilemanager',
  82. # Key='face.jpg',
  83. # )
  84. print(response)
  85. test()