What
Use requester pays configuration for DAAC bucket access.
Background
- IAM role based read access has been negotiated with some DAAC bucket owners for VEDA* services
- We also use this role to restrict which buckets can be read by the role (security purposes for public tiler)
- These in-region DAACs also require
AWS_REQUEST_PAYER=requester
- We have blanket applied this parameter for veda-backend instances that require DAAC bucket access https://github.com/NASA-IMPACT/veda-backend/blob/1370e3645f4f11c91996a15a626db8707f3bfcb5/raster_api/infrastructure/construct.py#L79
Related issues
https://github.com/NASA-IMPACT/veda-architecture/issues/767
https://github.com/US-GHG-Center/ghgc-architecture/issues/914
AC
What
Use requester pays configuration for DAAC bucket access.
Background
AWS_REQUEST_PAYER=requesterRelated issues
https://github.com/NASA-IMPACT/veda-architecture/issues/767
https://github.com/US-GHG-Center/ghgc-architecture/issues/914
AC
REQUESTER_PAYSfor our own buckets and provide findings in this issue/notify team