Python 数据摄取（从对 AWS S3 存储桶的 API 调用“获取”开始），如何管理用户名/密码/API 密钥和令牌（在短时间窗口内过期）

Question

data source is from SaaS Server's API endpoints, aim to use python to move data into AWS S3 Bucket(Python's Boto3 lib) API is assigned via authorized Username/password combination and unique api-key. then every time initially call API need get Token for further info fetch.

have 2 question:

1. how to manage those secrets above, save to a head file (*.ini, *.json *.yaml) or saved via AWS's Secret-Manager?
2. the Token is a bit challenging, the basically way is each Endpoint, fetch a new token and do the API call then that's end of too many pipeline (like if 100 Endpoints info need per downstream business needs) then need to craft 100 pipeline like an universal template repeating 100 times.

I am new to Python programing world, you all feel free to comment to share any user-case. Much appreciate !!

I searched and read this show-case

[saving-from-api-to-s3-bucket/74648533] saving from api to s3 bucket

and "how-to-write-a-file-or-data-to-an-s3-object-using-boto3" How to write a file or data to an S3 object using boto3

Answer 1

I found this has been helpful:

• # Python-decopule summary: store parameters in.ini or.env files;

• # few options of manage(hiding) sensitive info

   a. IAM role b. Store Secrets using **Parameter Store** c. Store Secrets using **Secrets Manager** - Current method recommended by AWS