Allow role based authentication

Created on 27 July 2023, 11 months ago
Updated 30 July 2023, 11 months ago

Problem/Motivation

Our IT security policy requires that we rotate credentials every few months. Across multiple Drupals, this means we spend far too much time updating credentials and it also introduces the opportunity for errors.

Steps to reproduce

Generate key and secret. Rinse and repeat for dozens of sites several times per year.

Proposed resolution

AWS allows principals to temporarily assume roles with additional permissions. If this module supported that, there would not be any need to manage secrets. All authorization could be handled via IAM roles and permission policies.

User interface changes

Add a role ARN field to the module config, so it can be passed in an Sts:AssumeRole call.

API changes

Extra helpers to read and write the role arn.

Data model changes

An extra field in the aws_profile config.

✨ Feature request
Status

Fixed

Version

2.0

Component

Code

Created by

πŸ‡¦πŸ‡ΊAustralia cafuego

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.69.0 2024