question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Support AWS STS for the vault secrets backend for aws

See original GitHub issue

Is your feature request related to a problem? Please describe. Would like to get STS working with the vault secrets backend for aws under spring vault. Currently, it appears that spring vault only supports IAM User or (/aws/creds/:name) and not other credential types such as STS federation token or Assumed role (/aws/sts/:name). I do not see any configuration options documented for alternate credential types.

Describe the solution you’d like Ideally, we would have a configuration option such as credential_type that could be set to one among iam_user, assumed_role or federation_token that would then map these to either /aws/creds for iam_user or /aws/sts for the federation token or assumed role.

Describe alternatives you’ve considered NA

Additional context NA

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Reactions:1
  • Comments:6 (6 by maintainers)

github_iconTop GitHub Comments

1reaction
mp911decommented, Feb 2, 2021

Feel free to submit a pull request. I’m not terribly familiar with AWS services so happy to collaborate on getting AWS STS into Spring Cloud Vault.

0reactions
krisiyecommented, Feb 26, 2021

@mp911de - Confirmed the issue I noticed above with revoke to be unrelated to the permissions. Seems like an out-of-order loading problem upon refresh. I have logged an issue for this one: https://github.com/spring-projects/spring-vault/issues/633

Read more comments on GitHub >

github_iconTop Results From Across the Web

AWS - Secrets Engines | Vault - HashiCorp Developer
The AWS secrets engine for Vault generates access keys dynamically based on IAM policies.
Read more >
AWS STS with Spring Cloud Vault - HMH Engineering
Vault AWS Secret Backend. The AWS secrets engine generates AWS access credentials dynamically based on IAM policies. The AWS IAM credentials are ...
Read more >
HashiCorp Vault on AWS—Partner Solution
An AWS Secrets Manager secret that contains the root token and unseal keys created during the HashiCorp Vault cluster initialization. An AWS Key...
Read more >
HashiCorp Vault supports AWS STS AssumeRole and TOTP
The AWS Secret Backend has built-in support for STS AssumeRole, which allows a POST /aws/sts/:name call to retrieve temporary credentials ...
Read more >
AWS secret backend with multiple AWS accounts - instance ...
Thus, I think I'll need to create an IAM user for Vault in each account with IAM management permissions, set up an access...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found