# Discourse ondersteunt geen service account en IAM-rol voor S3-back-up

**URL:** https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393
**Category:** Support
**Created:** [17 november 2021 om 07:09 UTC](https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393 "2021-11-17T07:09:58Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ZhaoGang](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zhaogang/32/240265_2.png) [@ZhaoGang](https://meta.discourse.org/u/ZhaoGang)
#### Post date: [17 november 2021 om 07:09 UTC](https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393/1 "2021-11-17T07:09:58Z")

</div>

I deployed Discourse to AWS EKS, and would like to enable Discourse S3 backup. The existing S3 backup requires access id and key of IAM user. However, our infrastructure require all apps running in AWS with IAM role.  
So with EKS, we can only provide kubernetes service account + IAM role (IRSA), I searched from internet and also source code for Discourse, and did not find out any reference for IRSA with Discourse and EKS.

Could you please help to confirm that there is no existing feature for IRSA, and please share the solution for my usecase. I am looking into the local backup + Cloudwatch + DataSync + S3 or local backup + AWS backup.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [17 november 2021 om 14:04 UTC](https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393/2 "2021-11-17T14:04:23Z")

</div>

Have you tried setting `s3_use_iam_profile` to `true` in the environment?

---

<div class="post-metadata">

### Author: ![ZhaoGang](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zhaogang/32/240265_2.png) [@ZhaoGang](https://meta.discourse.org/u/ZhaoGang)
#### Post date: [18 november 2021 om 01:56 UTC](https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393/3 "2021-11-18T01:56:57Z")

</div>

Thank you for your reply.  
My app is running in a shared EKS cluster, and I have no permission to update EC2 role policy. And I do not think Discourse could be configured to get EC2 role.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [18 november 2021 om 03:06 UTC](https://meta.discourse.org/t/discourse-does-not-support-service-account-and-iam-role-for-s3-backup/209393/4 "2021-11-18T03:06:26Z")

</div>

It sounds like you don’t have any options, then.

I think your solution is to have the uploads on S3 and then use external tools to backup the database.
