Brian Pitts Reporter
	Description • 6 years ago

Discussion of potential approaches: https://docs.google.com/document/d/1MmzpCyh8WxuYP_yd5wNm0_8pkTNbHrBxY86RNH1VEnA/edit?usp=sharing

	Miles Crabill [:miles]
	Comment 1 • 6 years ago

I looked at some of the other implementations that we found, and avoided them for these reasons:
  - discomfort with lua
  - go code using nonstandard AWS libraries (not official AWS SDK)
  - outdated / unmaintained

I've implemented a proxy that signs requests with AWS V4 Signatures. I've tested it in -new-stage.

Code: http://github.com/mozilla-services/aws-signing-proxy
PR to add it to processor infra code: https://github.com/mozilla-services/cloudops-deployment/pull/1618
Docker images: https://hub.docker.com/r/mozilla/aws-signing-proxy/

Once that PR is merged, we'll be set here.

	Miles Crabill [:miles]
	Comment 2 • 6 years ago

That PR has been merged. I've confirmed that requests from minidump-stackwalker in -new-stage and -new-prod are going through the proxy and that objects that exist in S3 are properly served via the proxy. (objects that do not exist return 403s).

Marking this fixed.