search

cagov / data-infrastructure

CalData infrastructure
https://cagov.github.io/data-infrastructure
MIT License
5 stars 0 forks source link

Consider using IAM roles for user access #128

Open ian-r-rose opened 1 year ago

ian-r-rose commented 1 year ago

The approach described here generates short term credentials, and allows for MFA. By using an appropriately configured CLI we can reduce the pain of having to assume the role manually (though short term credentials will still expire after an hour).

This is more in alignment with security best practices.

ian-r-rose commented 7 months ago

@melanie-logan you might be interested in looking at this one in connection with Okta roll-out