User's Guide

Identity Federation for AWS is a foundational Amazon Web Services (AWS) integration add-on, which exposes temporary AWS security credentials for other add-ons via a REST API and also provides Single Sign-On (SSO) to the AWS Management Console – this feature comes in two variations:

On this page:

Cross Product Features

AWS Management Console Login Menu

Users will be able to use a Single Sign-on (SSO) menu link for each AWS Connector they have access to. These links will appear automatically within JIRA or Bamboo and require no further configuration.

AWS Management Console Login Gadget

Users will be able to use the AWS Management Console Login gadget, exposing any number of configured Single Sign-on (SSO) links for those AWS Connector they have access to. They can use this gadget outside of JIRA and Bamboo (e.g. on Confluence pages) and configure it to show all or a desired subset of the available links.

Features specific to Atlassian Bamboo

AWS Credentials Variables task

You can use the AWS Credentials Variables task to provide managed temporary AWS security credentials for other tools by injecting them into AWS unaware tasks like the Bamboo Script task. This improves versatility for using tools that are not directly integrated with Identity Federation for AWS, but accept AWS credentials via the command line or environment variables.

AWS Credentials Variables task and Tasks for AWS

The AWS Credentials Variables task complements the dedicated AWS build and deployment tasks offered by Tasks for AWS by providing managed temporary AWS security credentials as Bamboo variables for tools that are not directly integrated with Identity Federation for AWS, but accept AWS credentials via the command line or environment variables, for example the AWS Command Line Interface (AWS CLI).

Usage of the AWS Credentials Variables task is free for Tasks for AWS licensees, see Do I need an Identity Federation for AWS license when using it from another Utoolity app like Automation with AWS or Tasks for AWS? for details.

Amazon ECR Credentials Variables task

You can use the Amazon ECR Credentials Variables task to provide temporary Amazon EC2 Container Registry (Amazon ECR) authentication credentials for other tools by injecting them into AWS unaware tasks like the Bamboo Docker task. This improves versatility for using tools that are not directly integrated with Identity Federation for AWS, but accept AWS credentials via the command line, environment variables or the Bamboo task interface.

Amazon ECR Credentials Variables task and Tasks for AWS

The Amazon ECR Credentials Variables task complements the dedicated AWS build and deployment tasks offered by Tasks for AWS by providing temporary Amazon EC2 Container Registry (Amazon ECR) authentication credentials as Bamboo variables for tools that are not directly integrated with Identity Federation for AWS, but accept Amazon ECR authentication credentials via the command line, environment variables or the Bamboo task configuration interface, for example the Bamboo Docker task.

Usage of the Amazon ECR Credentials Variables task is free for Tasks for AWS licensees, see Do I need an Identity Federation for AWS license when using it from another Utoolity app like Automation with AWS or Tasks for AWS? for details.

Features specific to Atlassian JIRA

Compatibility with JIRA Data Center

Identity Federation for AWS is tested for compatibility with the clustering and high-availability capabilities of JIRA Data Center as of release 2.2.0.