[ZBXNEXT-8283] Implement role based authentication for monitoring AWS EC2 instances. Created: 2023 Feb 03  Updated: 2024 Apr 10  Resolved: 2023 Oct 05

Status: Closed
Project: ZABBIX FEATURE REQUESTS
Component/s: Templates (T)
Affects Version/s: 6.2.6
Fix Version/s: 6.0.23rc1, 6.4.8rc1, 7.0.0alpha6, 7.0 (plan)

Type: New Feature Request Priority: Minor
Reporter: Tomass Janis Bross Assignee: Alexander Bakaldin
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Sub-task
depends on ZBX-22327 AWS by HTTP is not working with Zabbi... Closed
Team: Team INT
Sprint: Sprint 97 (Feb 2023), Sprint 98 (Mar 2023), Sprint 99 (Apr 2023), Sprint 100 (May 2023), Sprint 101 (Jun 2023), Sprint 102 (Jul 2023), Sprint 103 (Aug 2023), Sprint 104 (Sep 2023), Sprint 105 (Oct 2023)
Story Points: 1

 Description   

Hello!

Please add role based authentication functionality for AWS EC2 instance monitoring. For those who does not want to store credentials in macros.

Affected template:
https://www.zabbix.com/integrations/aws_ec2

Bit more details:
IAM roles for Amazon EC2 - Amazon Elastic Compute Cloud
Allow applications to make secure API requests by creating IAM roles and assigning them to your EC2 instances.

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

Retrieve security credentials from instance metadata

An application on the instance retrieves the security credentials provided by the role from the instance metadata item iam/security-credentials/role-name. The application is granted the permissions for the actions and resources that you've defined for the role through the security credentials associated with the role. These security credentials are temporary and we rotate them automatically. We make new credentials available at least five minutes before the expiration of the old credentials.

An instance of Zabbix server can automatically receive credentials in accordance with the role from which it is launched.



 Comments   
Comment by Alexander Bakaldin [ 2023 Oct 03 ]

Available in:

Generated at Fri Apr 25 12:57:34 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.