{% extends "akeru/base.html" %} {% load static %} {% block title %}Home{% endblock %} {% block content %}

Welcome to Akeru Cloud Access

Role deployment and federated access made easy

Card image cap
Manage Users Roles

Akeru can load policies from an S3 bucket and deploy them as an IAM user or role for users to log in as or as service linked roles.

Card image cap
Federated Access

The roles deployed via Akeru can be granted to users using Django's native group and users.

What is Akeru CA?

Akeru Cloud Access is a Django app that facilitates setting up and managing access to the AWS cloud. At it's core it provides the following functional features:

  • Deploy roles/users based on preexisting policy templates in S3
  • Link Django users to an AWS IAM role/user object in the Django DB to enable console access
  • Display users access on the /access/ page
  • Allow users to get temporary API credentials for their assigned users/roles

Configuring Akeru

SETTING REQUIREMENT PURPOSE
AWS_ACCOUNT_ID Required The AWS account
POLICY_BUCKET Required The S3 bucket that all template policy files are stored in.
POLICY_PREFIX Required Prefix to the policies within the S3 bucket
DEFAULT_TRUST_POLICY Required X-OR IAM role trust policy that is attached to any role in absence of an explicit trust policy
DEFAULT_TRUSTED_USERS Required X-OR IAM roles/users to insert in the default role trust policy in absence of an explicit trust policy
ASSUMED_ROLE_TIMEOUT Optional How long the assumed role provides access for before expiring (in seconds)
FEDERATED_USER_TIMEOUT Optional How long the assumed role provides access for before expiring (in seconds)
{% endblock %}