Add support for passwords in SSM Parameter Store

Question

Add support for passwords in SSM Parameter Store

IanMeyers opened this issue 7 years ago · 4 comments

IanMeyers commented 7 years ago

Answer 1 · 2019-01-31T13:27:43.000Z

Hi Ian,

This is important for China regions because kms is not available there yet. I can work on this and send an PR.

If you already have an design in mind, please kindly share with me. :)

Harold

Answer 2 · 2019-02-01T06:52:11.000Z

We can actually use IAM role to allow Lambda to access RedShift. RedShift can also use IAM role to gain access to S3. Using IAM will avoid to store AK/SK and password in DynamoDB.

@IanMeyers , is there any issue preventing us to use IAM in this solution?

Answer 3 · 2019-02-01T11:38:58.000Z

Hello - @bnusunny no issues preventing the use of Cluster IAM roles - you just need to add this information in the auth section.

Answer 4 · 2019-02-01T11:39:12.000Z

But I still think having support SSM parameter store makes sense.