mongulu-cm/lobembe

Use github as authentication mechanism for AWS

Closed this issue 2 years ago · 3 comments

billmetangmo commented 2 years ago

Use Auth0 ?
So that people will use https://github.com/99designs/aws-vault to assume role

billmetangmo commented 2 years ago

https://github.com/aws-actions/configure-aws-credentials ( refres https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-amazon-web-services)

Video HowTo: https://youtu.be/k2Tv-EJl7V4?t=1174

billmetangmo commented 2 years ago

Add IAM Access Analyzer to the role https://aws.amazon.com/fr/blogs/security/iam-access-analyzer-makes-it-easier-to-implement-least-privilege-permissions-by-generating-iam-policies-based-on-access-activity/

billmetangmo commented 2 years ago

abandonnée car prendra trop de temps et les bénéfices sont moindres.