Use IAM with Amazon Keyspaces (for Apache Cassandra) - AWS Identity and Access Management

Use IAM with Amazon Keyspaces (for Apache Cassandra)

Amazon Keyspaces (for Apache Cassandra) is a scalable, highly available, and managed Apache Cassandra-compatible database service. You can access Amazon Keyspaces through the AWS Management Console, or programmatically. To access Amazon Keyspaces programmatically with service-specific credentials, you can use cqlsh or open-source Cassandra drivers. Service-specific credentials include a user name and password like those that Cassandra uses for authentication and access management. You can have a maximum of two sets of service-specific credentials for each supported service per user.

To access Amazon Keyspaces programmatically with AWS access keys, you can use the AWS SDK, the AWS Command Line Interface (AWS CLI) or open-source Cassandra drivers with the SigV4 plugin. To learn more, see Create and configure AWS credentials for Amazon Keyspaces in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.

Note

If you plan to interact with Amazon Keyspaces only through the console, you don't need to generate service-specific credentials. For more information, see Accessing Amazon Keyspaces using the console in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.

For more information about the permissions required to access Amazon Keyspaces, see Amazon Keyspaces (for Apache Cassandra) Identity-Based Policy Examples in the Amazon Keyspaces (for Apache Cassandra) Developer Guide.

Generating Amazon Keyspaces credentials (console)

You can use the AWS Management Console to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.

To generate Amazon Keyspaces service-specific credentials (console)
  1. Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose Users and then choose the name of the user that requires the credentials.

  3. On the Security Credentials tab beneath Credentials for Amazon Keyspaces (for Apache Cassandra), choose Generate credentials.

  4. Your service-specific credentials are now available. This is the only time that the password can be viewed or downloaded. You cannot recover it later. However, you can reset your password at any time. Save the user and password in a secure location, because you'll need them later.

Generating Amazon Keyspaces credentials (AWS CLI)

You can use the AWS CLI to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.

To generate Amazon Keyspaces service-specific credentials (AWS CLI)

Generating Amazon Keyspaces credentials (AWS API)

You can use the AWS API to generate Amazon Keyspaces (for Apache Cassandra) credentials for your IAM users.

To generate Amazon Keyspaces service-specific credentials (AWS API)