data-dot-all / dataall

A modern data marketplace that makes collaboration among diverse users (like business, analysts and engineers) easier, increasing efficiency and agility in data projects on AWS.
https://data-dot-all.github.io/dataall/
Apache License 2.0
231 stars 82 forks source link

Support for User Guide Protection with External IDP using OIDC #898

Open TejasRGitHub opened 10 months ago

TejasRGitHub commented 10 months ago

Is your idea related to a problem? Please describe. With this change https://github.com/awslabs/aws-dataall/issues/872 , an external IDP will be added for authentication and authorization. When using the external IDP implementation, the user guide is not deployed and is not a part of the data.all stack.

This Github issue is for adding this feature of protecting user guide with external Idp.

Describe the solution you'd like Using the edge lambda code as mentioned here, a edge lambda can be attached to the user guide cloudfront distribution

Reference - https://aws.amazon.com/blogs/networking-and-content-delivery/securing-cloudfront-distributions-using-openid-connect-and-aws-secrets-manager/

dlpzx commented 9 months ago

Thanks for opening the issue @TejasRGitHub. Are you planning on implementing it?

TejasRGitHub commented 9 months ago

Hi @dlpzx , Sorry for the late reply. I won't be able to pick up this task soon. It would be great if you could add this in your next release. I would be more than happy to share my findings and methods to implement user guide protection with custom OIDC based auth.