diff --git a/docs/integrations/services/aws/index.md b/docs/integrations/services/aws/index.md new file mode 100644 index 000000000..af87c8d9d --- /dev/null +++ b/docs/integrations/services/aws/index.md @@ -0,0 +1,32 @@ +# Amazon Web Services Integration + +## What is AWS + +!!! note "" + Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 175 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster. + +## Preparation + +The following placeholders will be used: + +- `passbook.company` is the FQDN of the passbook Install + +Create an application in passbook and note the slug, as this will be used later. Create a SAML Provider with the following Parameters: + +- ACS URL: `https://signin.aws.amazon.com/saml` +- Audience: `urn:amazon:webservices` +- Issuer: `passbook` + +You can of course use a custom Signing Certificate, and adjust durations. + +## AWS + +Create a Role with the Permissions you desire, and note the ARN. + +AWS requires two custom PropertyMappings; `Role` and `RoleSessionName`. Create them as following: + +![](./property-mapping-role.png) + +![](./property-mapping-role-session-name.png) + +Afterwards export the Metadata from passbook, and create an Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers). diff --git a/docs/integrations/services/aws/property-mapping-role-session-name.png b/docs/integrations/services/aws/property-mapping-role-session-name.png new file mode 100644 index 000000000..adf0cbd15 Binary files /dev/null and b/docs/integrations/services/aws/property-mapping-role-session-name.png differ diff --git a/docs/integrations/services/aws/property-mapping-role.png b/docs/integrations/services/aws/property-mapping-role.png new file mode 100644 index 000000000..7bbf19e30 Binary files /dev/null and b/docs/integrations/services/aws/property-mapping-role.png differ diff --git a/docs/integrations/services/gitlab/index.md b/docs/integrations/services/gitlab/index.md index 70a6ca746..7b04e5d83 100644 --- a/docs/integrations/services/gitlab/index.md +++ b/docs/integrations/services/gitlab/index.md @@ -20,7 +20,7 @@ Create an application in passbook and note the slug, as this will be used later. - Audience: `https://gitlab.company` - Issuer: `https://gitlab.company` -You can of course use a custom Signing Certificate, and adjust the Assertion Length. To get the value for `idp_cert_fingerprint`, you can use a tool like [this](https://www.samltool.com/fingerprint.php). +You can of course use a custom Signing Certificate, and adjust durations. To get the value for `idp_cert_fingerprint`, you can use a tool like [this](https://www.samltool.com/fingerprint.php). ## GitLab Configuration diff --git a/docs/integrations/services/rancher/index.md b/docs/integrations/services/rancher/index.md index 786a50a03..ccd4e0152 100644 --- a/docs/integrations/services/rancher/index.md +++ b/docs/integrations/services/rancher/index.md @@ -21,7 +21,7 @@ Create an application in passbook and note the slug, as this will be used later. - Audience: `https://rancher.company/v1-saml/adfs/saml/metadata` - Issuer: `passbook` -You can of course use a custom Signing Certificate, and adjust the Assertion Length. +You can of course use a custom Signing Certificate, and adjust durations. ## Rancher diff --git a/docs/integrations/services/tower-awx/index.md b/docs/integrations/services/tower-awx/index.md index 77760b177..16c210e88 100644 --- a/docs/integrations/services/tower-awx/index.md +++ b/docs/integrations/services/tower-awx/index.md @@ -25,7 +25,7 @@ Create an application in passbook and note the slug, as this will be used later. - Audience: `awx` - Issuer: `https://awx.company/sso/metadata/saml/` -You can of course use a custom Signing Certificate, and adjust the Assertion Length. +You can of course use a custom Signing Certificate, and adjust durations. ## AWX Configuration diff --git a/mkdocs.yml b/mkdocs.yml index 2220fc5d5..6b390ef73 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -15,6 +15,7 @@ nav: - Policies: policies.md - Integrations: - as Provider: + - Amazon Web Services: integrations/services/aws/index.md - GitLab: integrations/services/gitlab/index.md - Rancher: integrations/services/rancher/index.md - Harbor: integrations/services/harbor/index.md