AWS glue medium security documentation change
Summary
Updated authentication method to use AWS Secrets Manager for storing API keys and revised connection configuration steps.
Security assessment
The change replaces direct API key usage with Secrets Manager integration, addressing credential exposure risks by enforcing secure secret storage. This directly mitigates a security weakness (hard-coded/insecure API key handling).
Diff
diff --git a/glue/latest/dg/freshdesk-configuring-connections.md b/glue/latest/dg/freshdesk-configuring-connections.md index 375ee08a9..f80c7b78d 100644 --- a//glue/latest/dg/freshdesk-configuring-connections.md +++ b//glue/latest/dg/freshdesk-configuring-connections.md @@ -7 +7 @@ -Freshdesk APIs supports access to user data using API keys. You can use a personal API key to authenticate the request. +Freshdesk supports custom authentication. @@ -9 +9 @@ Freshdesk APIs supports access to user data using API keys. You can use a person -To configure a Freshdesk connection: +For public Freshdesk documentation on generating the required API keys for custom authorization, see [Freshdesk authentication](https://developer.freshdesk.com/api/#authentication). @@ -11 +11 @@ To configure a Freshdesk connection: - 1. In AWS Glue Glue Studio, create a connection under **Data Connections** by following the steps below: +The following are the steps to configure Freshdesk connection: @@ -13 +13 @@ To configure a Freshdesk connection: - 1. When selecting a **Connection type** , select Freshdesk. + * In AWS Secrets Manager, create a secret with the following details: @@ -15 +15 @@ To configure a Freshdesk connection: - 2. Provide the `INSTANCE_URL` of the Freshdesk instance you want to connect to. + * For customer managed connected app – the secret should contain the connected app API key with `apiKey` as key. Note that you must create a secret per connection in AWS Glue. @@ -17 +17,7 @@ To configure a Freshdesk connection: - 3. Select the AWS IAM role which AWS Glue can assume and has permissions for following actions: + * In the AWS Glue Studio, create a connection under **Data Connections** by following the steps below: + + * When selecting a **Data source** , select Freshdesk. + + * Provide the `INSTANCE_URL` of the Freshdesk instance you want to connect to. + + * Select the AWS IAM role which AWS Glue can assume and has permissions for following actions: @@ -37 +43,3 @@ To configure a Freshdesk connection: - 4. Select the `secretName` which you want to use for this connection in AWS Glue to put the tokens. + * Select the `secretName` that you want to use for this connection in AWS Glue to put the tokens. + + * Select the network options if you want to use your network. @@ -39 +47 @@ To configure a Freshdesk connection: - 5. Select the network options if you want to use your network. + * Grant the IAM role associated with your AWS Glue job permission to read `secretName`. @@ -41 +49 @@ To configure a Freshdesk connection: - 2. Grant the IAM role associated with your AWS Glue job permission to read `secretName`. + * In your AWS Glue job configuration, provide `connectionName` as an **Additional network connection**.