Federated Identities for Amazon Entities

Federated Identities for Amazon Entities

1 vote

avatar

There are a couple of different entity types in RDM for AWS sessions; Amazon S3 Explorer, AWS Dashboard, and Amazon EC2 (Synchronizer).

Right now, it requires an Access Key and associated Secret Key in order to leverage.

This requires setting up a User in AWS' IAM and creating an associated pair, however, for environments that rely on federation with alternative identity providers, such as Okta, it is mostly Federated Identities that are assigned an IAM Role and are granted a temporary Access Key at the time of federation,

It would be good if we could somehow have something similar with the existing AWS entity types that would allow us to use these things by providing a login for a federated identity (perhaps it opens a browser so that it can handle authentication+MFA and then grabs the authorization token afterwards?) and then uses the temporary access key for the RDM entity function (like the EC2 synchronizer).

All Comments (1)

avatar

Hello,

Thank you for the request. From a quick search this is something that should be possible, looking at their documentation of how to sign into the AWS SDK (https://docs.aws.amazon.com/sdkref/latest/guide/access.html).

We'll keep an eye out for further feedback regarding this request to help us prioritize this in future roadmaps.

Regards,

Hubert Mireault