Is it possible to use SSM as the secrets backend with MWAA?

0

Hello,

I wanted to check on the possibility of using SSM Parameter store as a secrets backend for MWAA.

From what I see here it does not seem to be the case.

However, the answer to the question is 1 year old, not sure if it is still applicable.

2개 답변
0

If your requirements include secrets rotation, then Secrets Manager May be better suited than SSM.

Otherwise, SSM secure strings should be enough

profile picture
전문가
답변함 10달 전
  • From here I understand that SSM supports retrieval of secrets in secrets manager via aliasing, so we could get best of both worlds.

    I wanted to know if MWAA can access SSM.

  • Yes you can use them together, just be cost cautious thought. Basically you link your mwa to secrets manager and then instead of storing the secret in secrets manager, you store an SSM alias name, so they you can rotate that via native secret manager.

    It is doable, as mentioned consider if this “double cost” is worth thought, instead of just using secrets manager withou SSM aliases.

0

Hi, you can integrate Secrets Manager with MWAA; it's all detailled here https://docs.aws.amazon.com/mwaa/latest/userguide/connections-secrets-manager.html

Hope it helps

Didier

profile pictureAWS
전문가
답변함 10달 전
  • Thank you. I know that Secrets Manager can integrate with MWAA, I am checking if SSM can be used with MWAA. I know it can be used with Airflow.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠