Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to switch role for accessing Glue Schema Registry #26

Open
olivd4400 opened this issue May 24, 2024 · 1 comment
Open

Unable to switch role for accessing Glue Schema Registry #26

olivd4400 opened this issue May 24, 2024 · 1 comment

Comments

@olivd4400
Copy link

olivd4400 commented May 24, 2024

Hello,

With Amazon MSK Library for AWS Identity and Access Management, it is possible to switch role for accessing MSK cluster (https://github.com/aws/aws-msk-iam-auth?tab=readme-ov-file#specifying-an-aws-iam-role-for-a-client)

security.protocol=SASL_SSL sasl.mechanism=AWS_MSK_IAM #sasl.jaas.config=software.amazon.msk.auth.iam.IAMLoginModule required; sasl.jaas.config=software.amazon.msk.auth.iam.IAMLoginModule required awsRoleArn="arn:aws:iam::xxxxxx:role/msk_client_role" awsRoleSessionName="test-msk" ; sasl.client.callback.handler.class=software.amazon.msk.auth.iam.IAMClientCallbackHandler

This is working fine for Kafka access. Permissions that are checked within kakfa Ui for listing brokers, topics, ... are permissions attached to "msk_client_role" (endossed role)

However this SASL config awsRoleArn has no effect on the serde. Permissions that apply are the one attached to the logged user. Obvisously SASL config apply only to kafka-ui, not to the serde.

Would it be possible for the serde to swith to a specific role that allows Glue Schema Registry Access?

Thanks in advance,
Olivier

@Haarolean
Copy link
Contributor

Hi, this repo is not maintained (provectus/kafka-ui#4255)
Happy to see your bug reports here: https://github.com/kafbat/ui-serde-glue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants