hackyourfuture / infrastructure Goto Github PK

Opportunity - 0: Login to aws with a github account

What we're trying to solve:
Managing aws users is expensive, because creates an additional operational cost.
Reusing the github authentication, to establish permission within aws level would centralise the authentication process and assign the right set of permission for the allowed resources.
By providing one source of true at lower maintenance.

An approach:
The scope is to create an authentication logic that allows user to access to aws.amazon.com/console with a github user that belongs in the HackYourFuture organisation.

The system would map Teams to specific IAM roles and would create a SAML token with the aws provider.

First use case:
Class 14 needs to work at a lambda function that is hosted in our account.
To provide a better access to debug the production environment. The whole team class14 in github needs to be capable of reading the logs of the lambda function.

Steps to be done:

• Create oAuth Application in GitHub
• Create dedicate role for AWS in terraform
• Create hosted auth logic
• Add environment variable to lambda
• Add travis CI
• Deploy