Cloud Identity support in all native AWS Services

dstoeckel
Mon, 19 Aug 2024 15:05:17 +0000
Product Feedback

Currently only the S3 connector is able to make use of the Cloud Identity / OIDC connect feature. This means that for e.g. Kinesis, we either need to use an agent with instance credentials or create an IAM user.

The latter is the only option for direct connections, but is problematic because it requires to handle static credentials. Using, in especially, OIDC would allow us to purely rely on an STS role-assumption workflow leading to an overall more secure and less error-prone workflow. Finally, this would unify the workflow across AWS services.

Ideally, this should be supported by all connectors for AWS native services like Kinesis and DynamoDB.

8 posts - 4 participants