Restic AWS Credentials Wrapper

qini.py

#!/usr/bin/python3

import os
import sys
from configparser import ConfigParser

config = ConfigParser()
config.read(os.path.abspath(sys.argv[1]))

def get_value(path, value):
    if not len(path):
        return value
    path_array = path.split('.')
    value = value[path_array.pop(0)]
    path = '.'.join(path_array)
    return get_value(path, value)

print(get_value(sys.argv[2], config))

restic.sh

#!/bin/bash

if [[ "$AWS_PROFILE" -eq "" ]]; then
    export AWS_PROFILE=default
fi
export AWS_SECRET_KEY_ID=$(qini $HOME/.aws/credentials $AWS_PROFILE.aws_access_key_id)
export AWS_SECRET_ACCESS_KEY=$(qini $HOME/.aws/credentials $AWS_PROFILE.aws_secret_access_key)
eval /usr/bin/restic "$@"

python3 ./qini.py $HOME/.aws/credentials default.aws_access_key_id