Skip to content

relay proxy : support IAM auth for AWS Elasticache #680

Description

@BryanStenson-okta

Is your feature request related to a problem? Please describe.

Long-lived creds for connecting to AWS elasticache are an operational burden, and a security issue. We'd prefer to use short-lived IRSA/podIdentity tokens.

Describe the solution you'd like

I'd like to use IRSA/podIdentity to auth to AWS elasticache (redis/valkey). This would likely be gated by config (use_aws_iam_auth: true) to avoid interrupting the existing static creds solution.

Describe alternatives you've considered

Additional context

something similar to how this was solved: #127

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions