Feeds

AWS taps social networks for identity verification

Log in with Amazon, Facebook, Google, to your cloudy app

Next gen security for virtualised datacentres

Amazon Web Services makes most of its money out of its infrastructure services, but that isn't stopping Bezos & Co from trying to broaden the remit of their cloud.

One way to make AWS more attractive to devs (and thus use more services) is to have them build entire web sites on top of AWS, and to do this Amazon needs to produce technologies that solve major headaches, like social identity management.

The AWS Identity and Access Management service now supports log-ins from Google, Facebook or Amazon.com identities, the company announced in a blog post on Tuesday.

"Web identity federation enables your users to sign in to your app using their Amazon.com, Facebook, or Google identity and authorize them to seamlessly access AWS resources that are managed under your AWS account," Jeff Wierer, AWS's principal product manager for Identity and Access Management, wrote.

"If you are building a mobile or a client-based application, you can now integrate these three popular identity providers and authorize users without any server-side code and without distributing long-term credentials with the app."

The technology introduces a new Security Token Service API command AssumeRoleWithWebIdentity which requests a temporary security credential for customers who have been authenticated via Amazon.com, Facebook, or Google.

AWS Identity

Identity federation lets you sandbox social users

This lets developers give users a temporary pass which allows them to fiddle with AWS cloud resources without the developer needing to write a sophisticated backend to accommodate them.

Some example applications that can be built with the service include giving users the ability to log-in to an app, create a web avatar and upload it into the application's S3 storage.

Though the service looks to be handy for developers it also introduces a trade-off in forcing encouraging them to write more AWS-specific apps that can make use of the Identity Management suite – something major AWS developers are unlikely to sweat over, but which could introduce problems for application portability should they ever choose to migrate away from Bezos & Co's cloud. ®

The essential guide to IT transformation

More from The Register

next story
The Return of BSOD: Does ANYONE trust Microsoft patches?
Sysadmins, you're either fighting fires or seen as incompetents now
Microsoft: Azure isn't ready for biz-critical apps … yet
Microsoft will move its own IT to the cloud to avoid $200m server bill
Death by 1,000 cuts: Mainstream storage array suppliers are bleeding
Cloud, all-flash kit, object storage slicing away at titans of storage
US regulators OK sale of IBM's x86 server biz to Lenovo
Now all that remains is for gov't offices to ban the boxes
Oracle reveals 32-core, 10 BEEELLION-transistor SPARC M7
New chip scales to 1024 cores, 8192 threads 64 TB RAM, at speeds over 3.6GHz
VMware vaporises vCHS hybrid cloud service
AnD yEt mOre cRazy cAps to dEal wIth
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
7 Elements of Radically Simple OS Migration
Avoid the typical headaches of OS migration during your next project by learning about 7 elements of radically simple OS migration.
BYOD's dark side: Data protection
An endpoint data protection solution that adds value to the user and the organization so it can protect itself from data loss as well as leverage corporate data.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?