Remove requirement for access keys?

[mhalligan]

Greetings, -- I'm trying to use this with IAM role instead of access keys, it would be nice if the argument weren't required.

[zuazo]

These arguments would be required even for IAM roles. Perhaps we could read the AWS credentials from ohai by default for ease of use. But either way, I need this right_aws PR to be merged before implementing this feature. Unfortunately it's been a while since I sent it and I have no feedback.

I don't know if I will ever get to implement it. The reality is that we cannot use chef-handler-sns with IAM role credentials right now.

But thanks for the idea. Clearly it would be a nice feature.

[anthroprose]

The rightscale gem is pretty feature limited to say the least...

Honestly, I would use the aws-adk gem provided by Amazon, it's at least maintained.

I will gladly provide a Pull Request to switch Gems if there is any interest... either that or I'm just going to fork & do it for myself as this is a pretty critical path in my architecture (Global SQS/SNS Notification queues).

[zuazo]

Thanks @anthroprose, for both your comment in the right_aws PR and your proposal. I think we've waited long enough.

I'm working on your idea in this branch: https://github.com/onddo/chef-handler-sns/tree/aws-sdk. Still needs to be tested better. The problem with aws-sdk is that has heavier dependencies (like nokogiri and libxml2). But it's better than nothing.

[anthroprose]

@zuazo I understand the additional weight of the dependencies.. not a concern of mine, I am already running such a ruby heavy stack.

I would have ripped things apart myself, but honestly you have WAY better best practices on the report handlers than I ever could, and I'll probably fork this repo just to work on my own report handlers ;)

I will pull your new branch over the weekend and play with things.

[zuazo]

@anthroprose, thanks for your words. I really appreciate my work to be useful for you 😄

I just pulled a beta release of the handler with IAM roles support: 1.0.0.beta.1. You can install it with:

 $ gem install --pre chef-handler-sns

Or using a recipe (I'm planning to make a cookbook):

include_recipe "xml::ruby" # depends on the xml cookbook to install nokogiri

chef_gem "chef-handler-sns" do
  version "1.0.0.beta.1"
  options(:prerelease => true)
end

chef_handler "Chef::Handler::Sns" do
  source "#{Gem::Specification.find_by_name("chef-handler-sns").lib_dirs_glob}/chef/handler/sns"
  arguments { :topic_arn => "arn:aws:sns:us-east-1:12341234:MyTopicName" }
  action :enable
end

Any feedback will be appreciated.

[zuazo]

Version 1.0.0 released with IAM roles support. I'm currently working on the chef_handler_sns cookbook.