Skip to content

Latest commit

 

History

History
19 lines (13 loc) · 848 Bytes

index.md

File metadata and controls

19 lines (13 loc) · 848 Bytes
Raw

Authentication

Configure the plugin to authenticate with AWS.

The plugin authenticates with a single primary AWS account. You then authorize it with IAM to access Secrets Manager in one or more accounts.

Authentication methods:

  • EC2 Instance Profiles.
  • EC2 Container Service credentials.
  • Environment variables (set AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY before starting Jenkins).
  • Java properties (set aws.accessKeyId and aws.secretKey before starting Jenkins).
  • User profile (configure ~/.aws/credentials before starting Jenkins).
  • Web Identity Token credentials.

Recommendations:

  • Use EC2 Instance Profiles when running Jenkins on EC2.
  • Only use the long-lived access key methods (environment variables, Java properties, user profile) when there is no other choice. For example, when Jenkins is outside of AWS.