[KNOX-2020] Enhance hadoop-jwt cookie to interact with the AWS ecosystem

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: KnoxSSO, Server
• Assignee: Unassigned
• Reporter: Sharad K
• Created: 23/Sep/19 21:36
• Updated: 30/Nov/21 08:07

Description

It's desirable to access AWS managed services while accessing resources using Apache Knox. AWS provides SAML for federation, and we could enhance the SAML login flow in Knox to interact with AWS, and enhance the hadoop-jwt cookie with AWS credentials. The cookie now gives the gateway to interact with other AWS services like S3, DDB, EC2 etc (as defined by the IDP admin in the AWS Role that gets injected in SAML assertion).

Issue Links

• links to: GitHub Pull Request #153