Skip to content

Conversation

manachyn
Copy link
Contributor

@manachyn manachyn commented Sep 2, 2025

This pull request introduces comprehensive enhancements to the SQS worker example and the AWS IAM module documentation. It adds two new SQS worker deployment patterns (direct access and AssumeRole), improves the worker code to support AssumeRole authentication, and significantly expands the IAM README with detailed usage, configuration, and permissions guidance.

SQS Worker Example Enhancements:

  • Added a new example for direct access: creates an IAM user with SQS permissions and generates access keys automatically for the worker (sqs-worker-direct-access.yaml).
  • Added a new example for AssumeRole: creates a minimal IAM user that can assume a service role with SQS permissions, enabling temporary, rotated credentials for the worker (sqs-worker-assume-role.yaml).
  • Updated the main example to reference and explain these enhanced patterns, guiding users toward best practices for production deployments (sqs-worker.yaml).

Worker Application Improvements:

  • Updated worker.ts to detect and use AssumeRole credentials if relevant environment variables are set, falling back to direct credentials otherwise. This enables seamless switching between authentication patterns without code changes. [1] [2]
  • Added dependencies for STS and credential providers to support AssumeRole in the Node.js worker (package.json).

AWS IAM Module Documentation Upgrades:

  • Expanded the aws-iam README to cover users, roles, and policies, including new sections for entity features, configuration parameters, and usage examples for both direct access and AssumeRole patterns. [1] [2]
  • Added detailed documentation for IAM user and role management, including required permissions for each entity type and custom actions for user management. [1] [2]

These changes provide robust, production-ready SQS worker deployment patterns and make the IAM module much easier to use and understand for both direct credential and AssumeRole scenarios.

cursor[bot]

This comment was marked as outdated.

@manachyn manachyn merged commit 8ae3509 into main Sep 3, 2025
1 check passed
@manachyn manachyn deleted the sqs-client-auth branch September 3, 2025 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants