changelog++
This commit is contained in:
parent
4892242a90
commit
aba042acc6
12
CHANGELOG.md
12
CHANGELOG.md
|
@ -9,11 +9,13 @@ DEPRECATIONS/CHANGES:
|
|||
FEATURES:
|
||||
|
||||
* **AWS IAM Authentication**: IAM principals can get Vault tokens
|
||||
automatically using this new backend. Signed client identity information
|
||||
retrieved using the AWS API `sts:GetCallerIdentity` is validated against AWS
|
||||
STS service before issuing a Vault token. This backend is unified with the
|
||||
`aws-ec2` authentication backend, which allows additional EC2 related
|
||||
restrictions to be applied during the IAM authentication. [GH-2441]
|
||||
automatically, opening AWS-based authentication to users, ECS containers,
|
||||
Lambda instances, and more. Signed client identity information retrieved
|
||||
using the AWS API `sts:GetCallerIdentity` is validated against the AWS STS
|
||||
service before issuing a Vault token. This backend is unified with the
|
||||
`aws-ec2` authentication backend, and allows additional EC2-related
|
||||
restrictions to be applied during the IAM authentication; the previous EC2
|
||||
behavior is also still available. [GH-2441]
|
||||
* **MSSQL Physical Backend**: You can now use Microsoft SQL Server as your
|
||||
Vault physical data store [GH-2546]
|
||||
|
||||
|
|
Loading…
Reference in New Issue