AWS analytics services streamline user access to data, permissions setting, and auditing

This article summarizes how AWS analytics services now allow for streamlined user access to data, permissions setting, and auditing through trusted identity propagation, a new capability in AWS IAM Identity Center.

Specifically, the article covers:

• What trusted identity propagation is and how it allows applications like Tableau to propagate end-user identity down to AWS services like Amazon Redshift
• The benefits of trusted identity propagation:
  • Simplifies sign-in experience for end users
  • Allows data owners to define access based on real end-user identity
  • Allows auditors to verify data access by users
• How trusted identity propagation works using OAuth2 and JWT standards
• Steps to configure trusted identity propagation for your applications and downstream AWS services
• Example end-user experience flow when using Tableau with Okta and Amazon Redshift
• Availability of trusted identity propagation at no additional cost