Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AWS Provisioner Runtime Dependency Missing from edc-controlplane-base #1781

Open
bmg13 opened this issue Feb 3, 2025 · 1 comment
Open
Assignees
Labels
bug Something isn't working

Comments

@bmg13
Copy link
Contributor

bmg13 commented Feb 3, 2025

Describe the bug

We distribute the Tractus-X connector with a dataplane capable of handling both azure and aws related transfers. Despite including the azure provisioner in the controlplane runtime the AWS one is not included.

As a result the dataspace consumer AWS credentials are directly sent to the provider, as no temporary credentials (usually created during provisioning) are generated. This results in a potential security concern.

To Reproduce

Perform a TP using an AWS service (ex:S3).

Expected behavior

Creation of temp credentials instead of provider receiving the consumer's AWS credentials.

Possible Implementation

Include the AWS provision dependency in the edc-controlplane-base.

@bmg13 bmg13 added bug Something isn't working triage all new issues awaiting classification labels Feb 3, 2025
@lgblaumeiser lgblaumeiser removed the triage all new issues awaiting classification label Feb 4, 2025
@bmg13
Copy link
Contributor Author

bmg13 commented Feb 21, 2025

This issue is dependent on this issue eclipse-edc/Technology-Aws#521 since is limited by the datadestination on upstream since it aims at allowing use provided credentials.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants