Support AWS IAM Roles for Service Accounts (IRSA)

[marchchad]

The documentation (https://www.docuseal.com/docs/configuring-docuseal-via-environment-variables#:~:text=AWS%20S3%20Configuration) and the source (

docuseal/config/storage.yml

Lines 6 to 14 in a698118

	aws_s3:
	service: S3
	access_key_id: <%= ENV['AWS_ACCESS_KEY_ID'] %>
	secret_access_key: <%= ENV['AWS_SECRET_ACCESS_KEY'] %>
	region: <%= ENV['AWS_REGION'] || 'us-east-1' %>
	bucket: <%= ENV['S3_ATTACHMENTS_BUCKET'] %>
	public: <%= ENV['ACTIVE_STORAGE_PUBLIC'] == 'true' %>
	upload:
	cache_control: 'public, max-age=31536000'

) show that there is a preference for security credential keys to be configured. However, modern recommendations are to use IAM Roles for Service Accounts instead. Are there any plans to provide support for looking for credential files instead?

[omohokcoj]

@marchchad if you're using ec2 with IAM Roles - then simply define AWS_REGION and S3_ATTACHMENTS_BUCKET without AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY

[marchchad]

My bad, I titled the issue wrong. Imma close this and open another one that better describes the identity configuration.