Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

✨ Source dynamodb: Allow role based access #37530

Merged

Conversation

keiththompson
Copy link
Contributor

@keiththompson keiththompson commented Apr 24, 2024

What

Support role based access for DynamoDb connector. As a security principal, it is good to avoid using long living AWS Users. Role based access means you do not need to keep rotating user credentials.

https://medium.com/datamindedbe/why-you-should-not-use-iam-users-d0368dd319d3

How

By making access_key and secret_access_key optional in the config spec, we can fallback to using the DefaultCredentialsProvider if they're not provided. Anybody currently using access_key and secret_access_key will continue to use those credentials, so I've avoided a breaking change.

Review guide

  1. airbyte-integrations/connectors/source-dynamodb/src/main/resources/spec.json
  2. airbyte-integrations/connectors/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbConfig.java
  3. airbyte-integrations/connectors/source-dynamodb/src/main/java/io/airbyte/integrations/source/dynamodb/DynamodbUtils.java

User Impact

Role based access is now possible.

Can this PR be safely reverted and rolled back?

  • YES 💚
  • NO ❌

@keiththompson keiththompson requested a review from a team as a code owner April 24, 2024 11:04
Copy link

vercel bot commented Apr 24, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
airbyte-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Apr 30, 2024 8:40pm

Copy link
Member

@marcosmarxm marcosmarxm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some comments, let me know if they make sense!

Copy link
Member

@marcosmarxm marcosmarxm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some comments but almost ready to go.

@keiththompson
Copy link
Contributor Author

@marcosmarxm Thanks for your review - I've updated the PR to reflect the changes requested.

@keiththompson
Copy link
Contributor Author

Hi @marcosmarxm - I've updated the spec based on your comments. Thanks again.

@marcosmarxm marcosmarxm merged commit d26a3ba into airbytehq:master Apr 30, 2024
61 of 63 checks passed
@keiththompson keiththompson deleted the keith/dynamodb_role_based_access branch May 1, 2024 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/connectors Connector related issues area/documentation Improvements or additions to documentation community connectors/source/dynamodb
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants