# Use AWS IAM Roles and Temp Credentials for streaming from AWS S3

**URL:** https://community.wowza.com/t/use-aws-iam-roles-and-temp-credentials-for-streaming-from-aws-s3/54055
**Category:** Wowza Streaming Engine
**Created:** [October 10, 2019, 4:34pm UTC](https://community.wowza.com/t/use-aws-iam-roles-and-temp-credentials-for-streaming-from-aws-s3/54055 "2019-10-10T16:34:31Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Guillermo\_Rugilo](https://avatars.discourse-cdn.com/v4/letter/g/8dc957/32.png) [@Guillermo\_Rugilo](https://community.wowza.com/u/Guillermo_Rugilo)
#### Post date: [October 10, 2019, 4:34pm UTC](https://community.wowza.com/t/use-aws-iam-roles-and-temp-credentials-for-streaming-from-aws-s3/54055/1 "2019-10-10T16:34:31Z")

</div>

Hi, we are currently using S3 as the Media Cache Source and configured it using AWS Access Keys following this article: [https://www.wowza.com/docs/how-to-use-amazon-s3-authorization-with-wowza-streaming-engine-ec2-instances](https://www.wowza.com/docs/how-to-use-amazon-s3-authorization-with-wowza-streaming-engine-ec2-instances)

It’s working fine, but we now need to be able to stream from a “remote” S3 bucket of an AWS account we do not have full control, and I wonder if there’s a way (maybe developing a custom module somehow?) to configure the source to use an AWS IAM Role (instead of inputting the plain Access Keys) so that the Streaming Engine can assume the role and access the “remote” S3 bucket.

Thanks in advance.

---

<div class="post-metadata">

### Author: ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)
#### Post date: [October 11, 2019, 8:42pm UTC](https://community.wowza.com/t/use-aws-iam-roles-and-temp-credentials-for-streaming-from-aws-s3/54055/2 "2019-10-11T20:42:51Z")

</div>

Hello @Guillermo Rugilo, I did check with tech support on this and this would indeed require custom work done. If you’d like some assistance with this, our Pro-Services team may be able to help you build this module.

[https://www.wowza.com/professional-services](https://www.wowza.com/professional-services)

---

<div class="post-metadata">

### Author: ![Guillermo\_Rugilo](https://avatars.discourse-cdn.com/v4/letter/g/8dc957/32.png) [@Guillermo\_Rugilo](https://community.wowza.com/u/Guillermo_Rugilo)
#### Post date: [October 12, 2019, 7:40pm UTC](https://community.wowza.com/t/use-aws-iam-roles-and-temp-credentials-for-streaming-from-aws-s3/54055/3 "2019-10-12T19:40:57Z")

</div>

Got it. Thanks for your answer @Rose Power-Wowza Community Manager !

Is there any pointer you can give me on what/how should I extend the system to plug in this functionality? Any docs I can start reading?

At this point I want to understand the feasibility of the solution, the level of effort involved, the extra components I should plug in, and the deployment implications. Whenever I decide to go with this approach I’d likely contact Pro-Services.

Thanks again!
