search

blacklocus / anvil

(experimental) Linkable CloudWatch metrics graphs
https://anvil.blacklocus.com
4 stars 0 forks source link

implement cognito login #4

Open dirkraft opened 9 years ago

dirkraft commented 9 years ago

Update: 2015/04/16

Scoured the internet to finally arrive at half an answer https://forums.aws.amazon.com/thread.jspa?messageID=595838&tstart=0 and https://forums.aws.amazon.com/thread.jspa?messageID=599963

What I really wanted was to authenticate with AWS console credentials (and so permissions are checked by those associated with IAM users), which is not available for API use. So, where do we go from here?

dirkraft commented 9 years ago

Updated description with some findings about available authentication methods. There doesn't seem to be a way to use aws console user logins for other apps.

dirkraft commented 9 years ago

20 partially mitigates some of the login-related concerns. Organizations can provide an initial configuration link, so that all internal users are configured to the AWS API on the same key pair, which presumably has the minimum required permissions for anvil.

amcclosky commented 9 years ago

It seems like we could make it work with our google logins that could then have an IAM profile of some sort associated with them. maybe. I just briefly read the docs.