pandastrike / huxley

API and CLI for Docker Deployment
9 stars 1 forks source link

Move to Amazon IAM Tokens for Authorization #42

Open freeformflow opened 9 years ago

freeformflow commented 9 years ago

Currently, Huxley requires the user's raw AWS ID and secret key so it can make requests on the user's behalf. This is likely to generate security minded complaints.

We should switch over to using AWS Identity and Access Management (IAM), which would be more palatable from a security standpoint. We will need to gather a list of required services so the generated tokens will function properly with Huxley's components.