API Credentials in Docker Images ran on AWS ECS-Tasks - amazon-web-services

I have a few images that are ran through ECS on AWS which make get/post requests to an API. When I authenticate for the API, I have my credentials stored as variables.
Two Questions.
Is this safe/best practice when authenticating for an API in a Docker Image?
Is there an AWS service that can help me authenticate for the API?
NOTE: the API is not boto3.

I suggest storing the authentication credentials in AWS SecretsManager, or AWS SSM Parameter Store, and using this method to provide those credentials as environment variables to your ECS containers.

Related

update aws local backend config through cli

how to update amplify backend api?
I update backend of amplify for Cognito for password policy. Though not sure how to update the aws backend API files locally... it seems the backend json still holds the original init values.

how to integrate with already authenticated by using aws cognito service with aws copilot cli

how to integrate with already authenticated by using aws cognito service with aws copilot cli
if there is possible to integrate with aws cognito services(already authenticate with application load balance to aws copilot cli
Cross-posting the answer from https://github.com/aws/copilot-cli/issues/3374:
You can use Copilot's add-ons functionality to add a CFN template to integrate with AWS Cognito. Here is a sample template from a Copilot user.

Can we authenticate application user with on-premise directory services with AWS Lambda?

Am looking for authentication methods with our on-premise directory other than AWS Cognito user pool. I saw Lambda can be integrated with Azure AD. Our directory is SAML integrated. Can i achieve this with AWS Lambda function.? And how can i get access tokens to authorize API Gateway after authentication. If Possible, Please let me know how to achieve. Thanks in Advance.

AWS Elastic Beanstalk API call

I'm trying to to make a API call to AWS EB.
https://docs.aws.amazon.com/elasticbeanstalk/latest/api/API_DescribeApplications.html
https://elasticbeanstalk.us-west-2.amazonaws.com/?ApplicationNames.member.1=SampleApplication
&Operation=DescribeApplications
&AuthParams
What is the AuthParams and how to generate it?
Authparams are your authorization header credentials from AWS, only by using that you can call any AWS API.
https://docs.aws.amazon.com/AWSEC2/latest/APIReference/CommonParameters.html
Check this URL for more information.

is it possible to connect amazon web service rds with amazon web service cognito?

i am developing a android application using AWS's RDS and AWS Cognito service. so my question is there any way that i can connect the RDS with Cognito? please help.
I think there are two possible questions here so I'll answer them both.
If the question is, can I access RDS from a Cognito authed app:
RDS does not use AWS credentials for authentication, it uses database credentials. Cognito only vends credentials for AWS services, so you cannot use Cognito credentials to access an RDS database.
If the question is, can I link RDS to Cognito so I can query, manipulate or analyze your end users' datasets:
All access to users' datasets is done through Cognito. There is no export or link feature that allows you to use RDS.