From 821fe3147e4e418385c411fdb8a385fb936495e5 Mon Sep 17 00:00:00 2001 From: Benjamin Moody Date: Fri, 27 Sep 2024 13:06:50 -0400 Subject: [PATCH] edit_cloud: add links to instructions for using AWS CLI. We need to tell people that they need to be using an IAM user. We also need to tell them explicitly to enable "S3 full access": if your user doesn't have an IAM user policy that says they can access S3, then that user cannot access S3 resources in other AWS accounts, regardless of those resources' policies. (This is weird and surprising, because you can access S3 resources in your own account in that case; it's also weird and surprising that the default IAM user is forbidden from doing things that anonymous users are allowed to do.) --- .../user/templates/user/edit_cloud.html | 50 ++++++++++++++++++- 1 file changed, 48 insertions(+), 2 deletions(-) diff --git a/physionet-django/user/templates/user/edit_cloud.html b/physionet-django/user/templates/user/edit_cloud.html index 7a4f48a027..201275b1b6 100644 --- a/physionet-django/user/templates/user/edit_cloud.html +++ b/physionet-django/user/templates/user/edit_cloud.html @@ -27,6 +27,27 @@

Amazon Web Services

{% csrf_token %} {% if user.cloud_information.aws_verification_datetime %} +
+

+ To access {{ SITE_NAME }} resources via Amazon Web Services: +

+
    +
  1. + + Install the AWS + Command Line Interface. + +
    2. +
  2. + + Configure the AWS + Command Line Interface to use the identity shown below. + +
    3. +
+