Geek Answers Handbook

Can I use Amazon IAM as an authentication method for hosts?

Is it possible to use IAM to manage accounts for unix hosts with EC2 using the PAM module, similar to LDAP, NIS, etc. ??

My goal is to be able to centralize host authentication on our EC2 computers without the overhead of setting up a solution with a single sign.

+7
source share
2 answers

AWS IAM is designed to handle access to AWS resources. You can create new users, but the basic authentication that EC2 instances receive is through key pairs that do not match IAM users.

Perhaps you can create your own system that manages IAM users, and also generates a private and public key for their use inside the created instances (maybe even reusing the keys that you get when creating a new user in IAM).

In general, this does not really mean that we will use this path, as I understand it.

+2
source

Since you mentioned LDAP, you can use this project:

https://github.com/denismo/aws-iam-ldap-bridge

to synchronize the LDAP server with IAM.

0
source

More articles:


All Articles