Web based Cognito authentication for Nucleus Airflow UI

[ramesh-maddegoda]

💡 Description

As a part of the ticket Setup role based authentication and authorization for Airflow UI with Cognito, an ALB based approach to enable Cognito authentication for Nucleus Airflow UI was implemented. However, the ALB based approach only worked sometimes and currently there is an Amazon support ticket Case 172781777100323 to troubleshoot it. At the moment, a python script is used to get a web token URL to access Airflow UI.

This ticket is created to focus on resolving this ALB related problem and eventually implement web based Cognito authentication for Nucleus Airflow UI.

⚔️ Parent Epic / Related Tickets

Related: Setup role based authentication and authorization for Airflow UI with Cognito

[tloubrieu-jpl]

Ramesh needs the access log of the EC2 application load balancer to be set to investigate an issue with the web authentication for nucleus. Rmesh will send a ticket to MCP if it does not go through.

[ramesh-maddegoda]

It seems, there is a permission issues in MCP. I created the ticket GSD-4269

[tloubrieu-jpl]

The MCP ticket has been assigned to someone who is going to help investigate the issue.

[tloubrieu-jpl]

@ramesh-maddegoda was able to unblock this issue by having the log enabled. He will move forward now with this task.

[tloubrieu-jpl]

The AWS ticket is escalated to the Cognito team.

[tloubrieu-jpl]

Network rules (NACL) must be updated for that to work.

[jordanpadams]

📆 10/2024 status: in work on schedule

[tloubrieu-jpl]

@ramesh-maddegoda made tests which show that the network is properly configured. He is now investigating possible issues with the Gognito UI redirect URLs.