Accessing AWS SDK from on-prem server without secret key and access key

Question

I have an application deployed on on-prem server, is there a way to use only IAM role or policy to access AWS SDk. I dont want to provide or store the secret key and access key anywhere to access it. we can use IAM role or policy to access different service using AWS SDK.

Didier_Durand · Answer

Hi,

The AWS IAM Roles Anywhere were designed exactly for that purpose:

```
You can use AWS Identity and Access Management Roles Anywhere to obtain
 temporary security credentials in IAM for workloads such as servers, containers, 
and applications that run outside of AWS. Your workloads can use the same IAM policies
 and IAM roles that you use with AWS applications to access AWS resources. Using IAM Roles 
Anywhere means you don't need to manage long-term credentials for workloads running 
outside of AWS.
```

See https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html

Best,

Didier

Brettski-AWS · Answer

The recommended way of doing this is to use [AWS Roles Anywhere](https://aws.amazon.com/blogs/security/extend-aws-iam-roles-to-workloads-outside-of-aws-with-iam-roles-anywhere/).

Accessing AWS SDK from on-prem server without secret key and access key

Relevant content