fix: make data access role optional in ingest runtime (#383)

NASA-IMPACT · May 28, 2024 · c55e375 · c55e375
1 parent f83f668
commit c55e375
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/ingest_api/runtime/src/config.py b/ingest_api/runtime/src/config.py
@@ -15,7 +15,7 @@ class Settings(BaseSettings):
         description="URL of JWKS, e.g. https://cognito-idp.{region}.amazonaws.com/{userpool_id}/.well-known/jwks.json"  # noqa
     )
 
-    data_access_role_arn: AwsArn = Field(  # type: ignore
+    data_access_role_arn: Optional[AwsArn] = Field(  # type: ignore
         description="ARN of AWS Role used to validate access to S3 data"
     )
 

diff --git a/ingest_api/runtime/src/validators.py b/ingest_api/runtime/src/validators.py
@@ -9,8 +9,10 @@
 def get_s3_credentials():
     from src.main import settings
 
-    print("Fetching S3 Credentials...")
+    if not settings.data_access_role_arn:
+        return {}
 
+    print("Fetching S3 Credentials...")
     response = boto3.client("sts").assume_role(
         RoleArn=settings.data_access_role_arn,
         RoleSessionName="stac-ingestor-data-validation",