Hi folks, I have a question for anyone who has sch...
# ask-metaflow
c
Hi folks, I have a question for anyone who has scheduled EKS Kubernetes jobs with Argo… Is there anywhere with a full list of access dependencies Metaflow will require in AWS? So far we’ve identified that it needs
AssumeRole
and
GenerateDataKey
.
1
a
there are a few AWS roles involved, depending on how EKS is deployed and how Metaflow is deployed. Typically you'd only need read-write access to S3, and some adjacent KMS permissions like
GenerateDataKey
if using encrypted S3 buckets
https://github.com/outerbounds/terraform-aws-metaflow/blob/master/examples/eks_argo/eks.tf#L46-L58 <- this is the example from eks terraform template, but its actually more broad than it should be, it can be narrowed down to one bucket