Web based Cognito authentication for Nucleus Airflow UI

[ramesh-maddegoda]

🗒️ Summary

Web based Cognito authentication for Nucleus Airflow UI. This implementation is based on the AWS Technical Guide
Accessing a private Amazon MWAA environment using federated identities

♻️ Related Issues

Web based Cognito authentication for Nucleus Airflow UI

[jordanpadams]

@ramesh-maddegoda can we investigate these hotspots found by SonarCloud? Also generate a new secrets detection baseline for that failed workflow?

[ramesh-maddegoda]

@ramesh-maddegoda can we investigate these hotspots found by SonarCloud? Also generate a new secrets detection baseline for that failed workflow?

@jordanpadams , I did the secret detection 2 times and pushed the new baselines. I am investigating more.

[nutjob4life]

@ramesh-maddegoda I'll fix the .secrets.baseline — looks like it's missing one and there may be some copy/paste control characters or something

[ramesh-maddegoda]

@ramesh-maddegoda I'll fix the .secrets.baseline — looks like it's missing one and there may be some copy/paste control characters or something

@nutjob4life and @jordanpadams , It seems the issues reported are not due to secrets. Those are terraform related suggestions. I am improving those areas.

[jordanpadams]

thanks @ramesh-maddegoda. in addition to the secrets tool, if you could go into the sonarcloud tool and audit/close these issues with a comment describing why these are not an issue that would be great.

[jordanpadams]

Let me know if you have any questions

[nutjob4life]

Just a couple questions otherwise looking pretty good!

[sonarqubecloud]

Quality Gate passed

Issues
5 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ramesh-maddegoda]

thanks @ramesh-maddegoda. in addition to the secrets tool, if you could go into the sonarcloud tool and audit/close these issues with a comment describing why these are not an issue that would be great.

@jordanpadams , All SonarCube findings are resolved with code changes or with comments (example: a false positive related with using an unverified JWT token, while we actually verify the token few code lines after). In overall, that is a very helpful analysis!.