Trusted identity propagation across applications
Trusted identity propagation enables AWS services to do the following:
Authorize access to AWS resources based on the user’s identity context.
Securely share the user’s identity context with other AWS services.
These capabilities enable user access to be more easily defined, granted, and logged.
With trusted identity propagation, a user can sign in to an application, and that application can pass the users’ identity context in requests to access data in AWS services. Because access is managed based on a user's identity, users don't need to use database local user credentials or assume an IAM role to access data.
Topics
