Crate clotho

source ·
Expand description

This crate provides a library and binaries for identitying the origin of an AWS Sigv4 request. The only documented way to achieve this is by calling the STS endpoint https://docs.aws.amazon.com/STS/latest/APIReference/API_GetCallerIdentity.html . However, it turns out the AWS account ID is encoded in the AWS Access Key Id, as discovered bya short note on AWS KEY ID by Tal Be’ery. .
Instead of making an HTTP request for each authorization request, we can “extract” the AWS accound ID offline.

This is very useful for proxies and other use cases where the volume and response times of requests are critical.

Structs§

  • Representation of an AWS Credential used when unpacking the components of a Sigv4
  • YAML container struct

Enums§