3 ms·
We got rid of all IAM users used by applications and moved to role-based access. Nowhere in the application do you need to enter AWS credentials. AWS SDK will a
by steelaz 4y ago
We got rid of all IAM users used by applications and moved to role-based access. Nowhere in the application do you need to enter AWS credentials. AWS SDK will attempt to discover short-lived credentials for you and will assume the role specified at the infrastructure layer, e.g. in a task definition.
- LilBytes 4y agosame here, but we still have IAM Users for service accounts. E.g. some customers have on premise infra that needs to talk to our services of infrastructure. Do you know a way where RBAC can be used for the above? For us, we're using long lived credentials in this space using IAM Users but with very tightly controlled authorisations.
- steelaz 4y ago"IAM Roles Anywhere" was announced just a couple of weeks ago. It might be applicable to your case. https://aws.amazon.com/about-aws/whats-new/2022/07/aws-identity-access-management-iam-roles-anywhere-workloads-outside-aws/ https://aws.amazon.com/about-aws/whats-new/2022/07/aws-ident...