pcandoalmeida opened a new issue #9940:
URL: https://github.com/apache/airflow/issues/9940


   **Description**
   
   Add AWS Secrets Manager secrets backend support for SecureString parameters 
and include role based authentication when connecting to AWS via the 
SecretsManagerBackend class. 
   
   **Use case / motivation**
   
   PR #8186 added support for AWS Secrets Manager as a secrets backend within 
Airflow. SecureStrings currently do not get decrypted. From what I can also 
tell from the source code, the current implementation requires an AWS profile 
(and therefore, I am assuming a key/secret).
   
   I therefore wanted to see if we could add the ability to retrieve and make 
use of decrypted SecureString parameters and use non credentials based 
authentication (using a role, for example, to authenticate the connection to 
AWS SSM).
   
   This change would help my use of Airflow within my present company.
   
   The first issue I think is known and discussed in the above PR. The latter 
could perhaps do with some discussion as I could be wrong about the use of 
profile within SecretsManagerBackend.
   
   Thank you! 
   
   **Related Issues**
   
   - #8186


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to