AWS ECS (Fargate) Passwordless Authentication

AWS ECS (Fargate) Passwordless Authentication

Take look at https://kgs-software.atlassian.net/wiki/x/iYC2rw

IAM

To configure the authentication of the ECS container instance against the S3 bucket without a password, an IAM role must be created in AWS.

This IAM role requires the AmazonECSTaskExecutionRolePolicy permission policy in any case. It also requires the corresponding policy for access to S3, e.g. AmazonS3FullAccess.

image-20250416-140839.png

ECS

This role must then be set as a task role in the task definition under “Task roles”.

image-20250416-140931.png

tia ContentServer core configuration

To enable this authentication on the tia ContentServer core side, the following credentialsprovider parameter must be set in the repository.cfg. This means that no username and password need to be set.

<repo>.contentservice.s3blobstore.credentialsprovider=awsdefault