Use IAM with Amazon Keyspaces (for Apache Cassandra)
Amazon Keyspaces (for Apache Cassandra) is a scalable, highly available, and managed Apache Cassandra-compatible database
service. You can access Amazon Keyspaces through the AWS Management Console, or programmatically. To access Amazon Keyspaces
programmatically with service-specific credentials, you can use cqlsh
or
open-source Cassandra drivers. Service-specific credentials include a user
name and password like those that Cassandra uses for authentication and access management. You
can have a maximum of two sets of service-specific credentials for each supported service per
user.
To access Amazon Keyspaces programmatically with AWS access keys, you can use the AWS SDK, the AWS Command Line Interface (AWS CLI) or open-source Cassandra drivers with the SigV4 plugin. To learn more, see Create and configure AWS credentials for Amazon Keyspaces in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.
Note
If you plan to interact with Amazon Keyspaces only through the console, you don't need to generate service-specific credentials. For more information, see Accessing Amazon Keyspaces using the console in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.
For more information about the permissions required to access Amazon Keyspaces, see Amazon Keyspaces (for Apache Cassandra) Identity-Based Policy Examples in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.
Generating Amazon Keyspaces credentials (console)
You can use the AWS Management Console to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.
To generate Amazon Keyspaces service-specific credentials (console)
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/
. -
In the navigation pane, choose Users and then choose the name of the user that requires the credentials.
-
On the Security Credentials tab beneath Credentials for Amazon Keyspaces (for Apache Cassandra), choose Generate credentials.
-
Your service-specific credentials are now available. This is the only time that the password can be viewed or downloaded. You cannot recover it later. However, you can reset your password at any time. Save the user and password in a secure location, because you'll need them later.
Generating Amazon Keyspaces credentials (AWS CLI)
You can use the AWS CLI to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.
To generate Amazon Keyspaces service-specific credentials (AWS CLI)
-
Use the following command:
Generating Amazon Keyspaces credentials (AWS API)
You can use the AWS API to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.
To generate Amazon Keyspaces service-specific credentials (AWS API)
-
Complete the following operation: