[GH-ISSUE #1261] AWS EC2 instance role support? #676

New issue

Closed

opened 2026-03-04 01:47:48 +03:00 by kerem · 2 comments

kerem commented

2026-03-04 01:47:48 +03:00

Owner

Originally created by @sgleske-ias on GitHub (Apr 3, 2020).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1261

With EC2 instance roles you don't assign a role name to use or pass it as an argument. Amazon grants access just by being on the instance and the instance having a role associated with it.

So far all of the support requests I've seen talk about credentials or passing in a role as an argument. With an instance role you don't need to know the name, just use the S3 APIs and it should work if the role grants it.

Does s3fs-fuse work with instance roles?

Originally created by @sgleske-ias on GitHub (Apr 3, 2020). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1261 With EC2 instance roles you don't assign a role name to use or pass it as an argument. Amazon grants access just by being on the instance and the instance having a role associated with it. So far all of the support requests I've seen talk about credentials or passing in a role as an argument. With an instance role you don't need to know the name, just use the S3 APIs and it should work if the role grants it. Does s3fs-fuse work with instance roles?

kerem closed this issue

2026-03-04 01:47:48 +03:00

kerem commented

2026-03-04 01:47:49 +03:00

Author

Owner

@sgleske-ias commented on GitHub (Apr 3, 2020):

Looks like #1138 answers my question.

Specifically https://github.com/s3fs-fuse/s3fs-fuse/issues/1138#issuecomment-527306746

Ok found the right sequence

s3fs  -o iam_role -o url=http://s3.amazonaws.com  my.bucket.name /mnt

Also the /etc/fstab version

s3fs#my.bucket.name  /daemon-keystore fuse _netdev,allow_other,iam_role,url=http://s3.amazonaws.com 0 0

@sgleske-ias commented on GitHub (Apr 3, 2020): Looks like #1138 answers my question. Specifically https://github.com/s3fs-fuse/s3fs-fuse/issues/1138#issuecomment-527306746 > Ok found the right sequence > > ``` > s3fs -o iam_role -o url=http://s3.amazonaws.com my.bucket.name /mnt > ``` > > Also the /etc/fstab version > > ``` > s3fs#my.bucket.name /daemon-keystore fuse _netdev,allow_other,iam_role,url=http://s3.amazonaws.com 0 0 > ```

kerem commented

2026-03-04 01:47:49 +03:00

Author

Owner

@juliogonzalez commented on GitHub (Apr 4, 2020):

If this is not clear at the doc right now (could be), I'd suggest you submit a PR :-)

@juliogonzalez commented on GitHub (Apr 4, 2020): If this is not clear at the doc right now (could be), I'd suggest you submit a PR :-)

kerem referenced this issue

2026-03-04 02:01:15 +03:00

[PR #676] [MERGED] Move str definition from header to implementation #1599