使用广告组的授权使用Cognito，ELB，Lambda访问静态Web应用中的不同页面
我已经使用Cognito和Azure AD（SAML）实现了用户身份验证，以用于在Apache Server中运行在EC2实例上的静态应用。 我想从广告组授权用户从静态Web应用程序访问特定URL。 例如：对于管理组中的用户，只能使用路径 /admin /*进行
身份验证 访问页面 现在，我想提供基于组的页面访问页面，用于在EC2实例中运行的Apache中运行的静态应用程序。
是否有任何我可以授权用户而无需更改应用程序端的用户。 ？
提前致谢 ！
I have implemented user authentication with cognito and Azure AD (SAML) for static app running on EC2 instance in apache server.
I want to authorize user from AD group to access specific url from static web app.
For example : for users in admin group can only access pages with path /admin/*
For authentication I used ELB authenticate action which is working fine
Now I want to provide group based access to pages for static app running in apache running in ec2 instance.
Is there any with which I can authorize users without making any changes on application side. ?
Thanks in advance !
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
•我建议您创建由Amazon Cognito支持的用户池，并使用Microsoft Azure AD 的公司身份对其进行身份验证。因此，为此，您将必须首先在Amazon Cognito中创建用户池，实际上，它只是包含用户身份的组。为此，请参考下面的链接以获取有关其配置的更多详细信息： -
https://docs.aws.amazon.com/cognito/cognito/latest/developerguide/getting-started-with-with-with--cognito-user-poolser-pools.html
•完成上述操作后，您可以使用应用程序负载平衡器或弹性负载平衡为用户配置身份验证，就像使用Amazon Cognito 的Azure AD的用户一样。对于
在Amazon Cognito中配置用户池身份验证，您将必须准备使用符合OIDC的IDP，准备用于Amazon CloudFront以及其他用户要求编码和签名验证（例如用户身份验证）。为此，要配置相同的内容，请参考以下AWS文档链接： -https://docs.aws.aws.amazon.com/elasticalloadbalancing/latest/application/listener-authenticate-users.html
• I would suggest you create user pools supported by Amazon Cognito and authenticate them using corporate identities of Microsoft Azure AD. Thus, for this purpose, you will have to create user pools first in Amazon Cognito which are in fact nothing but groups containing user identities. For this purpose, kindly refer to the link below for more details on its configuration: -
https://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-cognito-user-pools.html
• Once you are done with the above, you can configure authentication for users using an application load balancer or elastic load balancing as you have done in case of users from Azure AD using Amazon Cognito. For
configuring the user pool authentication in Amazon cognito, you will have to prepare to use an OIDC-compliant IdP, prepare to use for Amazon CloudFront and other things like user claims encoding and signature verification like that for user authentication. For this purpose, to configure the same, kindly refer to the below AWS documentation link given: -https://docs.aws.amazon.com/elasticloadbalancing/latest/application/listener-authenticate-users.html