[Cyberduck-trac] [Cyberduck] #8880: Authentication using AWS AssumeRole and GetSessionToken with AWS STS

Cyberduck trac at cyberduck.io
Thu Apr 12 18:51:52 UTC 2018


#8880: Authentication using AWS AssumeRole and GetSessionToken with AWS STS
----------------------------+-------------------------
 Reporter:  tigris          |         Owner:  dkocher
     Type:  feature         |        Status:  assigned
 Priority:  low             |     Milestone:  7.0
Component:  s3              |       Version:  4.7
 Severity:  normal          |    Resolution:
 Keywords:  s3 iam sts mfa  |  Architecture:  Intel
 Platform:  Mac OS X 10.10  |
----------------------------+-------------------------
Changes (by mcnicr):

 * keywords:  s3 iam sts => s3 iam sts mfa


Comment:

 I would also suggest that allowing for MFA is/should be closely tied to
 this feature.  S3 security is at the forefront of many highlevel breaches
 in the news recently and permitting temporary credentials via
 sts:AssumeRole coupled with sts:GetSessionToken and allowing a client to
 use MFA significantly improves safety of data.

 We have 100's of Cyberduck users who can no longer use the product due to
 this missing feature.  I am very much looking forward to seeing this
 implemented so my user community can return to using CyberDuck

--
Ticket URL: <https://trac.cyberduck.io/ticket/8880#comment:32>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list