bottlerocket-os / bottlerocket-os/bottlerocket
[ECS] EFS encryption and IAM authentication support
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
This issue is tracking adding support for [EFS encryption](https://docs.aws.amazon.com/efs/latest/ug/encryption.html) and [IAM authentication](https://aws.amazon.com/blogs/aws/new-for-amazon-efs-iam-authorization-and-access-points/) to the ECS variant of Bottlerocket.
This will require the functionality provided by [amazon-efs-utils](https://docs.aws.amazon.com/efs/latest/ug/using-amazon-efs-utils.html). This package is written in Python, which is [not included in Bottlerocket](https://github.com/bottlerocket-os/bottlerocket/blob/develop/SECURITY_FEATURES.md#no-shell-or-interpreters-installed). To add support for these features, the plugin may need to be packaged as a container or rewritten in a language such as Rust.
Contributor guide
Assessment
This issue has not been assessed yet.