8

Is it possible to use IAM to manage user accounts for EC2-hosted unix hosts by way of a PAM module similarly to LDAP, NIS, etc...?

My goal is to have a means to centralize host authentication on our EC2 hosts without the overhead of setting up a single sign on solution.

hinder90
  • 571
  • 1
  • 4
  • 7

2 Answers2

2

AWS IAM is meant to handle access to AWS resources. You can create new users but the basic authentication which EC2 instances get is via key pairs, which are not the same as IAM users.

You might be able to create a system of your own which manages IAM users and also generates a private and public key for them to be used inside the instances being created (maybe even re-using the keys you get when creating a new user in IAM).

All in all its not really meant to be used that way, as far as I understand.

Eran Sandler
  • 491
  • 3
  • 4
0

Since you mentioned LDAP, you can use this project:

https://github.com/denismo/aws-iam-ldap-bridge

to sync an LDAP server with IAM.

Barak
  • 3,066
  • 2
  • 20
  • 33