add an attribute to AWSAccountClamp() for ReadOnly Roles

Author: brifordwylie

src/workbench/core/artifacts/artifact.py

@@ -236,6 +236,12 @@ def upsert_workbench_meta(self, new_meta: dict):
             This functionality will work for FeatureSets, Models, and Endpoints
             but not for DataSources. The DataSource class overrides this method.
         """
+
+        # Check for ReadOnly Role
+        if self.aws_account_clamp.read_only_role:
+            self.log.info("Cannot add metadata with a ReadOnly Role...")
+            return
+
         # Sanity check
         aws_arn = self.arn()
         if aws_arn is None:
@@ -444,10 +450,12 @@ def delete_metadata(self, key_to_delete: str):
 
 if __name__ == "__main__":
     """Exercise the Artifact Class"""
-    from workbench.api.data_source import DataSource
-    from workbench.api.feature_set import FeatureSet
+    from workbench.api import DataSource, FeatureSet, Endpoint
+
+    # Grab an Endpoint (which is a subclass of Artifact)
+    end = Endpoint("wine-classification")
 
-    # Create a DataSource (which is a subclass of Artifact)
+    # Grab a DataSource (which is a subclass of Artifact)
     data_source = DataSource("test_data")
 
     # Just some random tests

src/workbench/core/cloud_platform/aws/aws_account_clamp.py

@@ -54,7 +54,10 @@ def __init__(self):
 
         # Check our Assume Role
         self.log.info("Checking Workbench Assumed Role...")
-        self.aws_session.assumed_role_info()
+        role_info = self.aws_session.assumed_role_info()
+
+        # Check if the Role is a 'ReadOnly' role
+        self.read_only_role = "readonly" in role_info["AssumedRoleArn"].lower()
 
         # Check our Workbench API Key and Load the License
         self.log.info("Checking Workbench API License...")