Feeds

AWS taps social networks for identity verification

Log in with Amazon, Facebook, Google, to your cloudy app

Build a business case: developing custom apps

Amazon Web Services makes most of its money out of its infrastructure services, but that isn't stopping Bezos & Co from trying to broaden the remit of their cloud.

One way to make AWS more attractive to devs (and thus use more services) is to have them build entire web sites on top of AWS, and to do this Amazon needs to produce technologies that solve major headaches, like social identity management.

The AWS Identity and Access Management service now supports log-ins from Google, Facebook or Amazon.com identities, the company announced in a blog post on Tuesday.

"Web identity federation enables your users to sign in to your app using their Amazon.com, Facebook, or Google identity and authorize them to seamlessly access AWS resources that are managed under your AWS account," Jeff Wierer, AWS's principal product manager for Identity and Access Management, wrote.

"If you are building a mobile or a client-based application, you can now integrate these three popular identity providers and authorize users without any server-side code and without distributing long-term credentials with the app."

The technology introduces a new Security Token Service API command AssumeRoleWithWebIdentity which requests a temporary security credential for customers who have been authenticated via Amazon.com, Facebook, or Google.

AWS Identity

Identity federation lets you sandbox social users

This lets developers give users a temporary pass which allows them to fiddle with AWS cloud resources without the developer needing to write a sophisticated backend to accommodate them.

Some example applications that can be built with the service include giving users the ability to log-in to an app, create a web avatar and upload it into the application's S3 storage.

Though the service looks to be handy for developers it also introduces a trade-off in forcing encouraging them to write more AWS-specific apps that can make use of the Identity Management suite – something major AWS developers are unlikely to sweat over, but which could introduce problems for application portability should they ever choose to migrate away from Bezos & Co's cloud. ®

Boost IT visibility and business value

More from The Register

next story
The Return of BSOD: Does ANYONE trust Microsoft patches?
Sysadmins, you're either fighting fires or seen as incompetents now
Microsoft: Azure isn't ready for biz-critical apps … yet
Microsoft will move its own IT to the cloud to avoid $200m server bill
Shoot-em-up: Sony Online Entertainment hit by 'large scale DDoS attack'
Games disrupted as firm struggles to control network
Cutting cancer rates: Data, models and a happy ending?
How surgery might be making cancer prognoses worse
Silicon Valley jolted by magnitude 6.1 quake – its biggest in 25 years
Did the earth move for you at VMworld – oh, OK. It just did. A lot
VMware's high-wire balancing act: EVO might drag us ALL down
Get it right, EMC, or there'll be STORAGE CIVIL WAR. Mark my words
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Scale data protection with your virtual environment
To scale at the rate of virtualization growth, data protection solutions need to adopt new capabilities and simplify current features.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?