idea Support custom credential provider for AWS S3 endpoint in Suggest an Idea

Re: Support custom credential provider for AWS S3 endpoint - Status changed to: Open - Collecting Feedback

Shelley_Brennan — Mon, 08 Feb 2021 14:00:42 GMT

Thank you for the suggestion. We would like to collect feedback from others on direct integration with Hashicorp Vault.

We do provide a method for integration with external credentials, though it is not optimized for short-lived credentials: https://help.qlik.com/en-US/replicate/November2020/Content/Replicate/Main/Security/external_credentials.htm

Re: Support custom credential provider for AWS S3 endpoint

Prabodh — Tue, 16 Feb 2021 15:18:36 GMT

Hi Shelley,

The credential addon will not work for us as it would still require provisioning long-living AWS secret key and access key pair - which is against our security best practices.

We need the ability to integrate a custom credential provider for AWS. Check "Specifying a Credential Provider or Provider Chain" and "Explicitly Specifying Credentials" sections in this AWS documentation. Note: I am providing Java sdk example as it is the best documented.

In our case, we would need the ability to return something similar to BasicSessionCredentials and expect Replicate to understand it and refresh it once the credentials are nearing expiry. The interface exposed by Replicate would look something similar to AWSRefreshableSessionCredentials.

From now on, please track this idea from the Ideation por...

Meghann_MacDonald — Wed, 02 Aug 2023 16:33:40 GMT

From now on, please track this idea from the Ideation portal.

Link to new idea

Meghann

NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.

Re: Support custom credential provider for AWS S3 endpoint - Status changed to: Closed - Archived

Ideation — Wed, 02 Aug 2023 16:33:42 GMT