Identity Federation on AWS and Azure Instances

Why? That’s a good starting question to start with, what’s the goal? Here we’re talking about managing access to instances on AWS and Azure in a unified way and there’s a bunch of possibilities, including (not exhaustive): Local users from a csv list with a script Local users using a configuration management tool Using a central directory (NIS, AD, LDAP) Using strongDM While the two first options are legit for local services accounts, they really don’t scale well for human accounts due to number, turnover, company life, etc. The directory option is the sensible one to use when you have more than a handful of users. Nowadays tool of choice is Active Directory for this case, mainly because its administration tools are pretty easy to use works well. I’ll cover how strongDM compare to the Active Directory setup detailed below at the end of this post. Setting up Cross Cloud

Read more