Which is the best way to pass AWS credentials to Docker container?

amazon-web-services docker docker-compose
suraj chopade picture suraj chopade · Apr 1, 2016 · Viewed 86.7k times · Source

I am running docker-container on Amazon EC2. Currently I have added AWS Credentials to Dockerfile. Could you please let me know the best way to do this?

Answer

Vor picture Vor · Apr 1, 2016

The best way is to use IAM Role and do not deal with credentials at all. (see http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html )

Credentials could be retrieved from http://169.254.169.254..... Since this is a private ip address, it could be accessible only from EC2 instances.

All modern AWS client libraries "know" how to fetch, refresh and use credentials from there. So in most cases you don't even need to know about it. Just run ec2 with correct IAM role and you good to go.

As an option you can pass them at the runtime as environment variables ( i.e docker run -e AWS_ACCESS_KEY_ID=xyz -e AWS_SECRET_ACCESS_KEY=aaa myimage)

You can access these environment variables by running printenv at the terminal.

Related questions

Essential container in task exited

I am trying to configure my docker hub image with aws ecs..I have created repository, cluster, and task while running task am getting an error as an essential container in task exited 1. while trying to get exact error details …

Read More
How to run docker-compose on AWS CodeBuild?

I'm trying to setup automated Rails tests on AWS CodeBuild using docker-compose, but it errors out. In buildspec.yml: phases: build: commands: - docker-compose up -d [Container] 2018/10/23 11:27:56 Running command docker-compose up -d Couldn't connect to Docker daemon at http+docker://…

Read More
Can't push image to Amazon ECR - fails with "no basic auth credentials"

I'm trying to push a docker image to an Amazon ECR registry. I'm using docker client Docker version 1.9.1, build a34a1d5. I use aws ecr get-login --region us-east-1 to get the docker login creds. Then I successfully login with …

Read More