docs: add aws integration
This commit is contained in:
parent
0c2dc309e7
commit
4742ee1d93
|
@ -0,0 +1,32 @@
|
||||||
|
# Amazon Web Services Integration
|
||||||
|
|
||||||
|
## What is AWS
|
||||||
|
|
||||||
|
!!! note ""
|
||||||
|
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 175 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster.
|
||||||
|
|
||||||
|
## Preparation
|
||||||
|
|
||||||
|
The following placeholders will be used:
|
||||||
|
|
||||||
|
- `passbook.company` is the FQDN of the passbook Install
|
||||||
|
|
||||||
|
Create an application in passbook and note the slug, as this will be used later. Create a SAML Provider with the following Parameters:
|
||||||
|
|
||||||
|
- ACS URL: `https://signin.aws.amazon.com/saml`
|
||||||
|
- Audience: `urn:amazon:webservices`
|
||||||
|
- Issuer: `passbook`
|
||||||
|
|
||||||
|
You can of course use a custom Signing Certificate, and adjust durations.
|
||||||
|
|
||||||
|
## AWS
|
||||||
|
|
||||||
|
Create a Role with the Permissions you desire, and note the ARN.
|
||||||
|
|
||||||
|
AWS requires two custom PropertyMappings; `Role` and `RoleSessionName`. Create them as following:
|
||||||
|
|
||||||
|
![](./property-mapping-role.png)
|
||||||
|
|
||||||
|
![](./property-mapping-role-session-name.png)
|
||||||
|
|
||||||
|
Afterwards export the Metadata from passbook, and create an Identity Provider [here](https://console.aws.amazon.com/iam/home#/providers).
|
Binary file not shown.
After Width: | Height: | Size: 65 KiB |
Binary file not shown.
After Width: | Height: | Size: 66 KiB |
|
@ -20,7 +20,7 @@ Create an application in passbook and note the slug, as this will be used later.
|
||||||
- Audience: `https://gitlab.company`
|
- Audience: `https://gitlab.company`
|
||||||
- Issuer: `https://gitlab.company`
|
- Issuer: `https://gitlab.company`
|
||||||
|
|
||||||
You can of course use a custom Signing Certificate, and adjust the Assertion Length. To get the value for `idp_cert_fingerprint`, you can use a tool like [this](https://www.samltool.com/fingerprint.php).
|
You can of course use a custom Signing Certificate, and adjust durations. To get the value for `idp_cert_fingerprint`, you can use a tool like [this](https://www.samltool.com/fingerprint.php).
|
||||||
|
|
||||||
## GitLab Configuration
|
## GitLab Configuration
|
||||||
|
|
||||||
|
|
|
@ -21,7 +21,7 @@ Create an application in passbook and note the slug, as this will be used later.
|
||||||
- Audience: `https://rancher.company/v1-saml/adfs/saml/metadata`
|
- Audience: `https://rancher.company/v1-saml/adfs/saml/metadata`
|
||||||
- Issuer: `passbook`
|
- Issuer: `passbook`
|
||||||
|
|
||||||
You can of course use a custom Signing Certificate, and adjust the Assertion Length.
|
You can of course use a custom Signing Certificate, and adjust durations.
|
||||||
|
|
||||||
## Rancher
|
## Rancher
|
||||||
|
|
||||||
|
|
|
@ -25,7 +25,7 @@ Create an application in passbook and note the slug, as this will be used later.
|
||||||
- Audience: `awx`
|
- Audience: `awx`
|
||||||
- Issuer: `https://awx.company/sso/metadata/saml/`
|
- Issuer: `https://awx.company/sso/metadata/saml/`
|
||||||
|
|
||||||
You can of course use a custom Signing Certificate, and adjust the Assertion Length.
|
You can of course use a custom Signing Certificate, and adjust durations.
|
||||||
|
|
||||||
## AWX Configuration
|
## AWX Configuration
|
||||||
|
|
||||||
|
|
|
@ -15,6 +15,7 @@ nav:
|
||||||
- Policies: policies.md
|
- Policies: policies.md
|
||||||
- Integrations:
|
- Integrations:
|
||||||
- as Provider:
|
- as Provider:
|
||||||
|
- Amazon Web Services: integrations/services/aws/index.md
|
||||||
- GitLab: integrations/services/gitlab/index.md
|
- GitLab: integrations/services/gitlab/index.md
|
||||||
- Rancher: integrations/services/rancher/index.md
|
- Rancher: integrations/services/rancher/index.md
|
||||||
- Harbor: integrations/services/harbor/index.md
|
- Harbor: integrations/services/harbor/index.md
|
||||||
|
|
Reference in New Issue