bottlerocket-os / bottlerocket-os/bottlerocket

[ECS] EFS encryption and IAM authentication support

Open
#1,080 2 comments 26 reactions 0 assignees View on GitHub
area/ecs status/icebox type/enhancement
Dominant language
Rust
Stars
9.7k
Forks
586
Avg merge
1d 11h
Merged PRs (30d)
11

Description

This issue is tracking adding support for [EFS encryption](https://docs.aws.amazon.com/efs/latest/ug/encryption.html) and [IAM authentication](https://aws.amazon.com/blogs/aws/new-for-amazon-efs-iam-authorization-and-access-points/) to the ECS variant of Bottlerocket.

This will require the functionality provided by [amazon-efs-utils](https://docs.aws.amazon.com/efs/latest/ug/using-amazon-efs-utils.html). This package is written in Python, which is [not included in Bottlerocket](https://github.com/bottlerocket-os/bottlerocket/blob/develop/SECURITY_FEATURES.md#no-shell-or-interpreters-installed). To add support for these features, the plugin may need to be packaged as a container or rewritten in a language such as Rust.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.