[SERVER-45471] Add support to IAM Auth for AWS lambda Created: 09/Jan/20  Updated: 29/Oct/23  Resolved: 14/Jan/20

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 4.3.3

Type: Task Priority: Major - P3
Reporter: Mark Benvenuto Assignee: Mark Benvenuto
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Backwards Compatibility: Fully Compatible
Sprint: Security 2019-01-13, Security 2019-01-27
Participants:

 Description   

AWS Lambda functions can provide temporary credentials for a user if the function is is assigned an execution role. These are passed via environment variables AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_SESSION_TOKEN.

The client authentication should check these environment variables if there is not an explicit user name and password provided before check the local instance metadata services.

References
https://docs.aws.amazon.com/lambda/latest/dg/configuration-envvars.html#configuration-envvars-runtime
https://boto3.amazonaws.com/v1/documentation/api/latest/guide/configuration.html#environment-variables



 Comments   
Comment by Githook User [ 13/Jan/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-45471 Add support to IAM Auth for AWS lambda
Branch: master
https://github.com/mongodb/mongo/commit/87f20a3aa53d88846a34d299e9b0e7b39531a6e7

Comment by Githook User [ 13/Jan/20 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-45471 Add support to IAM Auth for AWS lambda
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/66e86e6bfa3c842d5f3146c53741c8c8cf25ed96

Comment by Mark Benvenuto [ 10/Jan/20 ]

Code Review URL: https://mongodbcr.appspot.com/537130165/
Code Review URL: https://mongodbcr.appspot.com/546740271/

Generated at Thu Feb 08 05:08:54 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.