topic Re: AWS - IAM Identity Center Integration in Cortex XSOAR Discussions

AWS - IAM Identity Center Integration

RSenanayake — Fri, 24 Nov 2023 03:27:19 GMT

Hi All,

Thank you in advance.

I am facing an issue currently in integrating the AWS - IAM Identity Center Community Contribution. I am not able to find the relevant information for the integration such as Role Session Name, and Role Session duration.

Can you assist me in understanding this requirement more so that I can find the relevant information on the AWS Side?

Thank you

Re: AWS - IAM Identity Center Integration

asawyer — Thu, 30 Nov 2023 00:29:16 GMT

Hi @RSenanayake – Please see here for descriptions of these parameters: https://xsoar.pan.dev/docs/reference/articles/aws-integrations---authentication#configure-the-aws-iam-integration-on-cortex-xsoar

Or see the AWS boto3 docs (this is the python lib the integration uses): https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/sts/client/assume_role.html

For Role Session Name and Role Session Duration specifically, the values are up to you. Role Session Duration can be specified or simply left blank to use the default value.

Re: AWS - IAM Identity Center Integration

RSenanayake — Thu, 30 Nov 2023 22:09:34 GMT

Hi Asawyer,

Thanks for the reply.

The link you shared is for IAM right? I am referring to the AWS Identity center.

Since the integration requires a role arn, is it an SSO role they are referring to or a general role? And also for the trust relationship, what are the parameters we should provide?

Re: AWS - IAM Identity Center Integration

asawyer — Fri, 01 Dec 2023 23:00:11 GMT

The document I linked applies to authentication for all AWS integrations in general. That one section does mention the AWS - IAM integration specifically, but the concepts still apply to all AWS integrations.

For the Role ARN, please follow the documentation here, which includes creating an IAM role for the integration: https://xsoar.pan.dev/docs/reference/articles/aws-integrations---authentication#configuration-using-access-key-and-secret-key. Then you will supply the ARN of that role in the integration instance settings.

Re: AWS - IAM Identity Center Integration

RSenanayake — Mon, 04 Dec 2023 04:03:13 GMT

Hi @asawyer ,

Thanks for the responses. I got it to work based on the documents you shared.