Reputation: 3318
I want to authenticate an Amazon Web Services user each time they use my app. I am developing the app using the AWS SDK for asp.net that will use the AWS-CLI to interact with the AWS API.
I know that a user with an AWS account can setup IAM credentials, is there some way I can use this?
The authentication would need to take place while the application is running which is why the following page is of no use to me!
https://docs.aws.amazon.com/sdk-for-net/v2/developer-guide/net-dg-config-creds.html
Basically I'm looking for some kind of OAuth to gain access to an AWS user's account when they use my app so that I can perform backups, starting and stopping of servers on behalf on them using the AWS Cli on ASP.NET.
Some kind of endpoint that I could get a response with a access and refresh token from would be ideal. For example this API contains lots of detail on exactly how to connect on behalf of a user, whereas AWS doesn't seem to have provided anything like this!
Upvotes: 3
Views: 995
Reputation: 1846
I think the documentation may be out of date. At AWS re:Invent 2017, there was an excellent session called "AWS CLI: 2017 and Beyond" which is currently available on YouTube. The presentation goes into detail about some of the new features, including dynamic credentials for the AWS CLI, and there is a corresponding GitHub repository awslabs/awsprocesscreds which may have some useful examples.
Upvotes: 1
Reputation: 3231
You can try AWS Cognito. I am not entirely sure, what kind of aws services are being accessed but Cognito does allow to expose certain services. Please go through https://aws.amazon.com/cognito/faqs/ for more details.
Upvotes: 1