- Newest
- Most votes
- Most comments
Is this about using on-premises server running Azure DevOps Services?
You can use IAM Roles Anywhere. Refer to Enable external pipeline deployments to AWS Cloud by using IAM Roles Anywhere which walk .. through the steps on how to obtain AWS temporary credentials for .. CI/CD pipelines by using IAM Roles Anywhere and an on-premises hosted server running Azure DevOps Services
Hi,
A standard way to proceed in your use case is Integrating AWS IAM Identity Center (IIC)with Azure AD SSO. See https://medium.com/cloudnloud/integrating-aws-iam-identity-center-with-azure-ad-sso-15b9be30d2f4 for all details.
This video might be helpful as well: https://www.youtube.com/watch?v=OMbob_ef7J4
After your Azure identity get recognized by IIC, it can start assuming standard AWS roles as you want.
Best,
Didier
While a useful article This only works for users and not azure DevOps CICD
Yes you can achieve this with OIDC within the AWS accounts you want your runners to push to.
This only works with self hosted runners and not the cloud runners.
You need to create a managed identity in extra and assign to your runners. Then they can assume a role in the accounts using OIDC authentication.
Are you using self hosted runners?
No, the server is located in a local data center, outside of AWS.
Relevant content
asked 4 years ago
asked 4 years ago
- AWS OFFICIALUpdated 2 months ago
- AWS OFFICIALUpdated 4 months ago
Yes, the server is located in a local data center, outside of AWS.
Then the blog post is relevant to your use case