Adding AWS profile authentication to SQS transport

Jamie Cressey · Jamie Cressey · commit b11b635efbb7 · 2015-08-11T10:42:16.000+01:00
diff --git a/beaver/config.py b/beaver/config.py
@@ -96,6 +96,7 @@ def __init__(self, args, logger=None):
             'sns_aws_topic_arn': '',
             'sqs_aws_access_key': '',
             'sqs_aws_secret_key': '',
+            'sqs_aws_profile_name': '',
             'sqs_aws_region': 'us-east-1',
             'sqs_aws_queue': '',
             'sqs_aws_queue_owner_acct_id': '',
diff --git a/beaver/transports/sqs_transport.py b/beaver/transports/sqs_transport.py
@@ -14,12 +14,16 @@ def __init__(self, beaver_config, logger=None):
 
         self._access_key = beaver_config.get('sqs_aws_access_key')
         self._secret_key = beaver_config.get('sqs_aws_secret_key')
+        self._profile = beaver_config.get('sqs_aws_profile_name')
         self._region = beaver_config.get('sqs_aws_region')
         self._queue_name = beaver_config.get('sqs_aws_queue')
         self._queue_owner_acct_id = beaver_config.get('sqs_aws_queue_owner_acct_id')
 
         try:
-            if self._access_key is None and self._secret_key is None:
+            if self._profile:
+                self._connection = boto.sqs.connect_to_region(self._region,
+                                                              profile_name=self._profile)
+            elif self._access_key is None and self._secret_key is None:
                 self._connection = boto.sqs.connect_to_region(self._region)
             else:
                 self._connection = boto.sqs.connect_to_region(self._region,
diff --git a/docs/user/usage.rst b/docs/user/usage.rst
@@ -83,6 +83,7 @@ Beaver can optionally get data from a ``configfile`` using the ``-c`` flag. This
 * sns_aws_topic_arn: Topic ARN (must exist)
 * sqs_aws_access_key: Can be left blank to use IAM Roles or AWS_ACCESS_KEY_ID environment variable (see: https://github.com/boto/boto#getting-started-with-boto)
 * sqs_aws_secret_key: Can be left blank to use IAM Roles or AWS_SECRET_ACCESS_KEY environment variable (see: https://github.com/boto/boto#getting-started-with-boto)
+* sqs_aws_profile_name: Can be left blank to use IAM Roles AWS_SECRET_ACCESS_KEY environment variable, or fixed keypair (above) (see: https://github.com/boto/boto#getting-started-with-boto)
 * sqs_aws_region: Default ``us-east-1``. AWS Region
 * sqs_aws_queue: SQS queue (must exist)
 * sqs_aws_queue_owner_acct_id: Optional. Defaults ``None``. Account ID or Principal allowed to write to queue
