I have the following Dockerrun.aws.json
:
{
"AWSEBDockerrunVersion": "1",
"Authentication": {
"Bucket": "bucket-of-another-aws-account",
"Key": "docker/.dockercfg"
},
"Image": {
"Name": "docker-image"
},
"Ports": [
{
"ContainerPort": "8080"
}
]
}
The Elastic Beanstalk Environment with our Docker container is running in the customer's AWS account and the S3 bucket with the .dockercfg
belongs to our AWS account.
For testing purposes I set the bucket policy principle to *
so that anyone can download the .dockercfg
file. Nevertheless Elastic Beanstalk is not able to download that file ("Failed to download authentication credentials docker/.dockercfg from bucket-of-another-aws-account
").
The next test was to move the file to an S3 bucket within the customer's AWS account. That worked.
Question is: Is it possible to use a bucket of another account in the Dockerrun.aws.json
? I could not find any hints in the documentation and I don't want to give the DockerHub API key to our customer.