is there any reference guide on how to grab values from aws credentials blocks? I'm trying to get region/access key/secret key from a credentials block in my prefect.yaml and I can't quite figure it out

AWS_DEFAULT_REGION: "{{ prefect_aws.awscredentials.my-aws-credentials.REGION_NAME }}"
          AWS_ACCESS_KEY_ID: "{{ prefect_aws.awscredentials.my-aws-credentials.AWS_ACCESS_KEY_ID }}"
          AWS_SECRET_ACCESS_KEY: "{{ prefect_aws.awscredentials.my-aws-credentials.AWS_SECRET_ACCESS_KEY }}"

tried a few different variations of the above without much luck.

"{{ prefect.blocks.aws-credentials.your-block-name.field-name-on-block }}"

ahhh so it's not the name of the class? https://github.com/PrefectHQ/prefect-aws/blob/main/prefect_aws/credentials.py#L58

here's some reference https://docs.prefect.io/latest/guides/prefect-deploy/#templating-options

sorry for dropping off on this but I was able to get this working yesterday with what you sent! I kept trying to reference it from prefect_aws, should have just followed the examples 😅

Hi @Kevin Grismore! I’m Tomas’ teammate working on a similar issue and I’m trying to use the

aws-secret

block. I’ve been calling it following the syntax you shared of

"{{ prefect.blocks.aws-credentials.your-block-name }}"

but I’m hitting this error:

prefect.utilities.dockerutils.BuildError: error reading build args: json: cannot unmarshal object into Go value of type string

I’m trying to pass the value of the block into the

buildargs

param of a

build_docker_image

step, which is expecting a string. My understanding is that the block value is returning a json. do you know of a way to get around this?

hmmm

Sure

so what exactly is the thing you're trying to pass in? what you have is going to load the entire block, which is comprised of a nested AwsCredentials block and

secret_name

which would be the name of your secret in aws

I’m trying to pass in the value of that block

as in, the name of the AWS secret? not the actual token, right? I assume that is stored in AWS

yep, we have the actual token stored in AWS, I want to access the value of it

yeah, there's no straightforward way to do that since the other example in this thread is about accessing values that are stored directly in the block. the

AwsSecret

block just stores the secret's name and some credentials. the block class in python provides methods you can call that use the block's contents to go and grab the secret from AWS

so adding something like

GITHUB_TOKEN: "{{ prefect.blocks.aws-secret.alex-ilyin-github-token.read_secret() }}"

could work?

I don't think it works that way, since we're not exactly calling block methods when we resolve the template references. the blocks themselves are data models that can be transmitted as json

ohhh right I see that now

there are a couple of other ways you could do this though

the reason we’re doing this in the first place is to install a python package from a git directory passing in the github_user and github_token values. I got it to work by just using the prefect.secrets block so I have that to fall back on. I was just hoping to find a simple work around to use an aws secret

we also have a github credentials block that might serve that purpose that comes with a little more inherent meaning if you were to read your prefect.yaml

ah ok I didn’t notice that one