hashicorp / hashicorp/vault-action

[FEAT] Support IAM / EC2 auth methods

Open
#199 3 comments 14 reactions 0 assignees View on GitHub
enhancement
Dominant language
JavaScript
Stars
513
Forks
166
Avg merge
6d 4h
Merged PRs (30d)
1

Description

**Is your feature request related to a problem? Please describe.**
I have private github runners in AWS that already have an instance profile. Calls to vault should be able to leverage that instance profile role or another assumed role to auth.

**Describe the solution you'd like**
An additional authentication method in this action code that supports vault AWS auth options.

**Describe alternatives you've considered**
Use sts assume role and vault cli commands to retrieve the secrets in a bash script.

**Additional context**
https://www.vaultproject.io/docs/auth/aws

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the action's existing authentication methods and the linked Vault AWS authentication documentation. Define support for authenticating with an EC2 instance profile or an assumed role, then verify that the GitHub Action can retrieve Vault secrets through the selected AWS auth option.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, github-actions, javascript
Domain
authentication, cloud, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.