JA EN
shiichan

DataSync Enhanced mode supports OIDC for Google Cloud and Microsoft Azure

AWS What's New ★★★★ View Markdown
#aws#security#infrastructure

Hi everyone, it's Shiichan! This one makes key management for cross-cloud data transfer much easier.

AWS What's New aws.amazon.com

What was announced?

AWS What's New says AWS DataSync Enhanced mode now supports OpenID Connect (OIDC) authentication for Google Cloud Storage and Microsoft Azure Blob Storage locations.

The story so far

Before this, accessing Google Cloud Storage or Azure Blob Storage needed long-term credentials such as HMAC keys or shared access signature (SAS) tokens.

What changes

DataSync uses an AWS IAM role to get short-lived credentials from Google Cloud or Microsoft Entra ID, and refreshes them automatically so transfers run without interruption.

The nice part is that you can move data across clouds while complying with security policies that prohibit long-term credentials.

Dive Deep

To get started:

  • Add an IAM role to your DataSync location
  • You can do this with the AWS CLI, API or AWS CloudFormation

It's available in all AWS Regions where DataSync Enhanced mode is supported. See the AWS DataSync User Guide for details.

Wrap-up

  • DataSync Enhanced mode supports OIDC for Google Cloud Storage and Azure Blob Storage
  • An IAM role fetches short-lived credentials and refreshes them automatically
  • No long-term credentials such as HMAC keys or SAS tokens
  • Available in Regions where DataSync Enhanced mode is supported

This is for security and infrastructure folks who move data across clouds and want less credential management!

Related posts