azure-pipelines-tasks-terraform icon indicating copy to clipboard operation
azure-pipelines-tasks-terraform copied to clipboard

Feature request -- Enable AWS OIDC connections as well as secret and access key

Open interestinginteger123 opened this issue 1 year ago • 6 comments

Hi currently this task requires a secret and access key setup in the service connection. Would you be able to extend it to grab temporary credentials from OIDC from the aws tool kit connection please?

The aws tool kit does return a OIDC param looks of things so think adding in some conditional flow and returning a set of credentials would sort this.

https://github.com/aws/aws-toolkit-azure-devops/blob/master/src/lib/awsConnectionParameters.ts

In the toolkit of use OIDC is enabled it returns a set of temporary parameter for access.

interestinginteger123 avatar Aug 13 '24 13:08 interestinginteger123

@piizei Thoughts?

jason-johnson avatar Aug 27 '24 10:08 jason-johnson

Hi, I would love to have this functionality supported :rocket: since I cannot use long-term AWS credentials for security reasons (it's not recommended by AWS docs as well).

It looks like this feature was implemented but not merged (PR #411). Does anyone know why? 💯

BTW This feature is also not supported by the Microsoft DevLabs extension (not implemented since 2022): https://github.com/microsoft/azure-pipelines-terraform/issues/70 https://github.com/microsoft/azure-pipelines-terraform/issues/87

tomasz-baran avatar Oct 03 '24 15:10 tomasz-baran

Hi, I would love to have this functionality supported 🚀 since I cannot use long-term AWS credentials for security reasons (it's not recommended by AWS docs as well).

It looks like this feature was implemented but not merged (PR #411). Does anyone know why? 💯

BTW This feature is also not supported by the Microsoft DevLabs extension (not implemented since 2022): microsoft/azure-pipelines-terraform#70 microsoft/azure-pipelines-terraform#87

Having the exact same issue atm, would be nice to see this feature added.

seriva avatar Oct 04 '24 07:10 seriva

Hey team .....It would be great to have this feature added, as I'm currently dealing with the same problem.

sagarjangidhub avatar Oct 04 '24 08:10 sagarjangidhub

Is there an update on this feature request?

sanderjochems-capgemini avatar Aug 19 '25 14:08 sanderjochems-capgemini

I am also interested in seeing this feature request implemented.

charlottebrady avatar Nov 13 '25 14:11 charlottebrady