Azure Key Vault Credential Provider and OIDC SSO now available
Aembit has released new versions of the following components and packages:
- Helm Chart
- Terraform ECS module
- Agent Proxy
- AWS Lambda Extension
- AWS Lambda Layer
- Agent Injector
For the latest available versions of these components, see the Edge Components Supported Versions page.
Key Updates:
- Azure Key Vault Private Network Access: Added support for accessing Azure Key Vault instances configured with private network endpoints
- Performance Improvements: Enhanced performance for Secure Parameter Exchange (SPE) Postgres database operations
- Dependency Updates: Updated multiple project dependencies to their latest stable versions
- Rust and Hyper Upgrade: Upgraded to Rust 1.89.0 and introduced the hyper HTTP library for improved performance and security
- Logging Enhancements: Internal improvements to logging functionality for better observability and debugging
Aembit has released the new Azure Entra Federation Credential Provider Integration and Azure Key Vault Credential Provider.
Together, they enable you to retrieve secrets from Azure Key Vault directly through Aembit using Azure’s Workload Identity Federation.
The Azure Entra Federation integration leverages OpenID Connect (OIDC) standards to authenticate with Azure Entra without requiring long-lived secrets or static credentials. This allows Aembit to securely access your Azure Key Vault instances using short-lived, federated tokens.
The Azure Key Vault Credential Provider supports:
- Single value credentials (API keys, tokens)
- Username/Password credentials
- Both public and private network access scenarios
- Policy-driven access controls and centralized auditing
See Azure Entra Federation Credential Provider Integration and Azure Key Vault Credential Provider to learn more.
You can now configure OIDC 1.0 Identity Providers for administrator Single Sign-On (SSO) authentication. This enables you to use OIDC-compliant identity providers such as Okta, Azure AD, and Auth0 to simplify the Aembit Tenant login process for your users. With OIDC support, you can leverage your existing identity infrastructure for secure, standardized authentication to the Aembit administrative console.
For more information, see Create an OIDC Identity Provider.