13
IAM authentication to access the Database
Source: directus/directus#24451 · opened by @adelinn
Summary It would be great if Directus would become capable of authenticating to the database using a Service Account / Service Principal and IAM permissions in a cloud environment instead of requiring the use of plain password. There is currently possible to achieve that but the solution is very hacky. Basic Example Say I want to deploy Directus to Cloud Run. I can configure there an integration with Cloud SQL. Instead of specifying the DB_PASSWORD I would set something like DB_IAM_AUTH=gcp and Directus would configure Knex to use a Google Cloud Access Token for the password and refresh it before expiring. Motivation Moving away form secrets in favor of temporary tokens has become the trend now as it reduces the risk of getting the database compromised if the service is compromised and makes secret management easier. Additionally, it's a step forward in making security easier as handling a database secret can be done wrong, while configuring token based authentica…
No pledges yet. Be the first to back this.
Comments
Similar requests
Support for S3 Access via EKS Service Accounts
2 votes · 0 comments
RFC for Magic sign-in link via email
88 votes · 0 comments
REST-API: Support reusing authentication from configured auth provider
9 votes · 0 comments
Storing Directus metadata in a different database and keeping user database clean
12 votes · 0 comments
Enhance SSO Workflow for Cross-Domain Authentication
4 votes · 0 comments
No comments yet.