Blue Prism - Amazon Textract Authentication with IAM Roles and Not IAM User

[annaonesmus]

Good Day

As a best practice, AWS strongly recommends using IAM Roles over IAM Users for third-party access. 

• IAM Users: Have permanent, long-term credentials (passwords and access keys) that are uniquely associated with a single person or application
• IAM Roles: Provide temporary security credentials that are valid only for a role session and can be assumed by anyone who needs them.

The company policy does not allow creation of IAM users.

Kindly provide guidance on how I can authenticate with IAM Roles in Blue Prism Amazon Textract object and APIs. If possible, provide a blue prism object that can achieve this.

Kind Regards

Anna

[steven.boggs]

Hi Anna,

I see this post hasn't gotten any replies since it was created, so I thought I'd link you to our Digital Exchange's "Textract Capability AWS Cloud" Asset so you could review and let us know if it would meet your stated requirements.

It's the only relevant result when searching "Textract" on the DX, and I wasn't able to locate any Blue Prism-specific information about "IAM" Users vs Roles. Perhaps by bumping this thread, others who may be more experienced with this type of integration could provide their feedback though.

[annaonesmus]

Hi Steven 
 "Textract Capability AWS Cloud" Asset is what I am using. However, it requires an IAM User with Access Keys (Key ID and Secret Key) to authenticate. I need to authenticate with IAM Roles and I am failing to figure out how. If you can help me with that configuration in the Blue Prism Object.

Kind Regards

Anna

[steven.boggs]

Anna,

Thanks for confirming. That asset is "Community Supported" which means it is not an official part of the Blue Prism product that is formally supported, rather support is provided in the Community.

In my role with Blue Prism Product Support I don't have direct experience with this object, so I'll tag in @RuthFrancis @ewilson @charliekovacs from our DX team here so they could potentially provide some feedback on this.