How to call s3 from opa to fetch json data files

[akshay410]

Is it possible to fetch json data files stored in s3 using http.send . i'm trying a simple http get request using below code
httpResponse := http.send({ "method" : "GET", "url" : url })

with config.yaml having

  config:
    services:
      s3:
        url: https://{bucketName}.s3.ap-south-1.amazonaws.com
        dataFile: dataFile.json
        credentials:
          s3_signing:
            web_identity_credentials:
              aws_region: ap-south-1

I'm trying to access s3 using web identity credentials. i've created a role to access s3 which is attached to the EC2 where i'm running opa but it's giving access denied. can someone help me on how to send signed request instead of simple http call (how to fetch access key/secret key in opa to create a signed request)

[srenatus]

There's another builtin that might be relevant here: https://www.openpolicyagent.org/docs/latest/policy-reference/#providers.aws. Its examples include fetching a json blob from S3: https://www.openpolicyagent.org/docs/latest/policy-reference/#basic-request-signing-example

[akshay410]

is there a way to do it without using access key and secret key ? because due to security reasons we can't use these