hvac.aws_utils

Classes:

SigV4Auth(access_key,Β secret_key[,Β ...])

Functions:

generate_sigv4_auth_request([header_value])

Helper function to prepare a AWS API request to subsequently generate a "AWS Signature Version 4" header.
class hvac.aws_utils.SigV4Auth(access_key, secret_key, session_token=None, region='us-east-1')[source]

Bases: object

Methods:

__init__(access_key,Β secret_key[,Β ...])

add_auth(request)

__init__(access_key, secret_key, session_token=None, region='us-east-1')[source]
add_auth(request)[source]
hvac.aws_utils.generate_sigv4_auth_request(header_value=None)[source]

Helper function to prepare a AWS API request to subsequently generate a β€œAWS Signature Version 4” header.

Parameters:

header_value (str) – Vault allows you to require an additional header, X-Vault-AWS-IAM-Server-ID, to be present to mitigate against different types of replay attacks. Depending on the configuration of the AWS auth backend, providing a argument to this optional parameter may be required.

Returns:

A PreparedRequest instance, optionally containing the provided header value under a β€˜X-Vault-AWS-IAM-Server-ID’ header name pointed to AWS’s simple token service with action β€œGetCallerIdentity”

Return type:

requests.PreparedRequest