-
Notifications
You must be signed in to change notification settings - Fork 4.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
✨ Source dynamodb: Allow role based access #37530
✨ Source dynamodb: Allow role based access #37530
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
f5d43e2
to
ccb1879
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some comments, let me know if they make sense!
...rs/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbConfig.java
Outdated
Show resolved
Hide resolved
...ors/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbUtils.java
Show resolved
Hide resolved
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some comments but almost ready to go.
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
Show resolved
Hide resolved
...rs/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbConfig.java
Outdated
Show resolved
Hide resolved
99aa2c5
to
1994b84
Compare
1994b84
to
265823f
Compare
@marcosmarxm Thanks for your review - I've updated the PR to reflect the changes requested. |
8db8ab7
to
c4cf7b5
Compare
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
Outdated
Show resolved
Hide resolved
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
Show resolved
Hide resolved
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
Show resolved
Hide resolved
Hi @marcosmarxm - I've updated the spec based on your comments. Thanks again. |
What
Support role based access for DynamoDb connector. As a security principal, it is good to avoid using long living AWS Users. Role based access means you do not need to keep rotating user credentials.
https://medium.com/datamindedbe/why-you-should-not-use-iam-users-d0368dd319d3
How
By making access_key and secret_access_key optional in the config spec, we can fallback to using the DefaultCredentialsProvider if they're not provided. Anybody currently using access_key and secret_access_key will continue to use those credentials, so I've avoided a breaking change.
Review guide
airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
airbyte-integrations/connectors/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbConfig.java
airbyte-integrations/connectors/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbUtils.java
User Impact
Role based access is now possible.
Can this PR be safely reverted and rolled back?