{% extends "akeru/base.html" %} {% load static %} {% block title %}Home{% endblock %} {% block content %}
Akeru can load policies from an S3 bucket and deploy them as an IAM user or role for users to log in as or as service linked roles.
The roles deployed via Akeru can be granted to users using Django's native group and users.
Akeru Cloud Access is a Django app that facilitates setting up and managing access to the AWS cloud. At it's core it provides the following functional features:
SETTING | REQUIREMENT | PURPOSE |
---|---|---|
AWS_ACCOUNT_ID | Required | The AWS account |
POLICY_BUCKET | Required | The S3 bucket that all template policy files are stored in. |
POLICY_PREFIX | Required | Prefix to the policies within the S3 bucket |
DEFAULT_TRUST_POLICY | Required X-OR | IAM role trust policy that is attached to any role in absence of an explicit trust policy |
DEFAULT_TRUSTED_USERS | Required X-OR | IAM roles/users to insert in the default role trust policy in absence of an explicit trust policy |
ASSUMED_ROLE_TIMEOUT | Optional | How long the assumed role provides access for before expiring (in seconds) |
FEDERATED_USER_TIMEOUT | Optional | How long the assumed role provides access for before expiring (in seconds) |