Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-39894

Add support for AWS credentials in the shell

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.1.11
    • Component/s: Shell
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Epic Link:
    • Sprint:
      Security 2019-03-25, Security 2019-04-08, Security 2019-04-22

      Description

      1. Add support for AWS credentials in Mongo() constructor (see scripting/mozjs/mongo.cpp)
      2. Add support for reading AWS information from command line flags

      awsAccessKeyId=<string>

      • AWS Access Key Id, an identifier, not security sensitive
        awsSecretAccessKey=<string>
      • AWS Secret Key, paired with Key Id, security sensitive
      • It must be redacted from the command line
      • Will be held in secure memory (i.e. non-pageable, not captured by dumps, zeroed on free)
        awsSessionToken=<string>
      • Optional AWS Session Token Id, an identifier, not security sensitive
        awsRegion=<string>
      • AWS Region name

      For API details, see scope

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: