An admin should be able to specify an option kms_key_id that is added to the service credentials payload to indicate what KMS key a service consumer can use for server side encryption.

An admin cloud enforce the usage of KMS by added something like the following to their bucket policy:
{ "Version":"2012-10-17", "Id":"PutObjPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"*", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::YourBucket/*", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"AES256" } } } ] }

Is there a reason that the published catalog includes "requires":["syslog_drain"]? I can remove it in a PR if its redundant/cargo culted from somewhere else.

is there a possibility to set the host?
because ceph(radosgw) have almost full s3 support
see http://docs.ceph.com/docs/master/radosgw/s3/

we already use ceph for cf droplets

    droplets:
      droplet_directory_key: <%= root_domain %>-cc-droplets-new
      fog_connection:
        provider: "AWS"
        host: "s3.eden.klm.com"
        scheme: "http"
        port: 80
        aws_signature_version: "2"
        aws_access_key_id: "XXXXXXXXXXXXXXXXXX
        aws_secret_access_key: "XXXXXXXXXXXXXXXXXXXXXXX"

so we only need to be able to set ( host, scheme, port, aws_signature_version )

Is there a way or support to bind an app to multiple S3 buckets?

My app is currently binded to an S3 bucket and has access to the following environments:

    "credentials": {
     "access_key_id": "MXHUA",
     "bucket": "cloud-foundry-82-59cf655a61ef",
     "host": "s3.amazonaws.com",
     "secret_access_key": "RBiB0Or1LaukH",
     "uri": "s3://AKJMXHUA:[email protected]/cloud-foundry-c882-59cf655a61ef",
     "username": "cloud-foundry-s3-79031277d"
    }

I'm wondering if the app can be binded to multiple buckets?

Support basic proxy configuration as well as proxies that require authentication.

Hi,

I am having issues deleting an s3-cf-service-broker instance can anyone help? Error message is:

cf delete-service brooklyn-s3Test -f
Deleting service brooklyn-s3Test in org CloudSoft-01 / space CS-01 as [email protected]...
FAILED
Server error, status code: 502, error code: 10001, message: Service instance brooklyn-s3Test: Service broker error: Bad Request (Service: Amazon S3; Status Code: 400; Error Code: 400 Bad Request; Request ID: 5E202360E87EBB71)

also tried without the -f flag and same message occurs

Many thanks

Adam

It creates the IAM group, but not a user.

Later, when deleting the service key, an error is in the logs for its inability to delete the missing user.

Binding to an application generates IAM user & credentials correctly.

Releases or at least tagging for safe commits would be lovely :)

Hello,
I installed the package from github and wanted to build the package using mvn.but i revcieved the below error with the pom.xml file:

[INFO] Scanning for projects...
Downloading: http://repo.spring.io/libs-snapshot/org/springframework/boot/spring-boot-starter-parent/1.1.4.RELEASE/spring-boot-starter-parent-1.1.4.RELEASE.pom
Downloading: https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-parent/1.1.4.RELEASE/spring-boot-starter-parent-1.1.4.RELEASE.pom
[ERROR] [ERROR] Some problems were encountered while processing the POMs:
[FATAL] Non-resolvable parent POM for org.cloudfoundry.broker:s3-cf-service-broker:2.3.0-SNAPSHOT: Could not transfer artifact org.springframework.boot:spring-boot-starter-parent:pom:1.1.4.RELEASE from/to spring-io (http://repo.spring.io/libs-snapshot): repo.spring.io: unknown error and 'parent.relativePath' points at wrong local POM @ line 4, column 10
@
[ERROR] The build could not read 1 project -> [Help 1]
[ERROR]
[ERROR] The project org.cloudfoundry.broker:s3-cf-service-broker:2.3.0-SNAPSHOT (/home/js37gfy/s3-cf-service-broker/pom.xml) has 1 error
[ERROR] Non-resolvable parent POM for org.cloudfoundry.broker:s3-cf-service-broker:2.3.0-SNAPSHOT: Could not transfer artifact org.springframework.boot:spring-boot-starter-parent:pom:1.1.4.RELEASE from/to spring-io (http://repo.spring.io/libs-snapshot): repo.spring.io: unknown error and 'parent.relativePath' points at wrong local POM @ line 4, column 10: Unknown host repo.spring.io: unknown error -> [Help 2]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/ProjectBuildingException
[ERROR] [Help 2] http://cwiki.apache.org/confluence/display/MAVEN/UnresolvableModelException
bash-4.1$

clould you please help sort out this.

An admin should be able to configure the bucket policy via an environment variable rather than having to fork the project and update configuration in source.

In addition to the standard tags added to buckets, an admin should be able to provide additional custom tags.