getting the current user account-id in boto3

2019-02-04 03:33发布

I need to get the account-id of the 'current user' in a boto3 script. Up to now my best solution is to parse the current user arn:

>>> import boto3
>>> account_id = boto3.resource('iam').CurrentUser().arn.split(':')[4]

but I was wondering if there is a more 'lightweight' approach. In fact

>>> timeit.timeit("boto3.resource('iam').CurrentUser().arn",
... 'import boto3', number=10)
4.8895583080002325

and I actually do not need the CurrentUser resource in my script.

2条回答
劳资没心,怎么记你
2楼-- · 2019-02-04 04:22

You can get the account ID by using the STS API:

>>> import boto3    
>>> boto3.client('sts').get_caller_identity().get('Account')
'012345678901'
查看更多
【Aperson】
3楼-- · 2019-02-04 04:32

EDIT: There is now an api you can call, see mixja's answer.

First off, there is no way to get the account id straight from boto3. There is no information stored locally that can tell you that, and there is no service API that returns it outside the context of an ARN. So there is no way to get it from boto3 without inspecting an ARN.

Secondly, using timeit can be very misleading with boto3 or botocore because there is a bit of warm-up time when you create a client or resource for the first time (the service definitions are loaded on the fly).

查看更多
登录 后发表回答