Skip to main content
Examples/Auth Identities for Stores
EXAMPLE

Auth Identities for Stores

Demonstrates how [stores](https://atmos.tools/cli/configuration/stores) authenticate using [Atmos auth identities](https://atmos.tools/cli/configuration/auth) instead of the default credential chain.

Stacks
Try it out View on GitHub
cloudposse / atmos

Try it out

Copy the example into a new directory and make it your own:

atmos init examples/auth-stores
cd auth-stores

Follow the README for prerequisites and next steps.

Initialization and repository settings

See it in action

RECORDED DEMO
auth-stores
Recorded from this example
Real commands. Real output.
README.md1.8 KB
View on GitHub

Auth Identity for Stores Example

Demonstrates how stores authenticate using Atmos auth identities instead of the default credential chain.

Each store references a named identity via the identity field. When the store is accessed, Atmos authenticates using the referenced identity and passes the resolved credentials to the cloud SDK.

Configuration

stores:
  prod/ssm:
    kind: aws/ssm
    identity: prod-admin          # Uses this identity for AWS credentials
    options:
      region: us-east-1

Supported Stores

Store KindIdentity Kind
aws/ssmAny AWS identity
azure/keyvaultAny Azure identity
gcp/secretmanagerAny GCP identity

Manage Store Values with the CLI

Use the atmos store command group to read, write, delete, and list values in any of these stores. set, get, delete, and list STORE (listing the key/values inside a named store) authenticate using the identity configured on the target store. Bare atmos store list (no store name) is the exception: it only lists the configured store descriptors and never authenticates against a backend.

atmos store list
atmos store set prod/ssm image_tag sha256:abc123 --stack=prod --component=ecs-service
atmos store get prod/ssm image_tag --stack=prod --component=ecs-service

Learn More

See Stores documentation.