AWS DataSync Enhanced mode supports OpenID Connect (OIDC) for Google Cloud and Microsoft Azure

AWS DataSync Enhanced mode has introduced support for OpenID Connect (OIDC) authentication, enabling secure access to Google Cloud Storage and Microsoft Azure Blob Storage without requiring long-term credentials such as HMAC keys or SAS tokens. The feature leverages an AWS IAM role to obtain short-lived credentials from Google Cloud or Microsoft Entra ID, which are automatically refreshed to maintain uninterrupted data transfers. This update aligns with security policies that restrict the use of persistent credentials, offering a more secure alternative for cross-cloud data movement. Users can configure the feature using the AWS CLI, API, or AWS CloudFormation.

The enhancement allows organizations to transfer data between AWS and other cloud providers while adhering to stricter security protocols that prohibit long-term credential storage. By eliminating the need for HMAC keys or SAS tokens, DataSync reduces the risk of credential exposure and simplifies compliance with security policies. The integration with Google Cloud Storage and Microsoft Azure Blob Storage expands DataSync’s interoperability, supporting hybrid and multi-cloud architectures. This capability is now available in all AWS Regions where DataSync Enhanced mode is supported.

To implement OIDC authentication, users must configure an IAM role in DataSync and link it to their Google Cloud or Microsoft Azure storage locations. The process can be completed through the AWS CLI, API, or AWS CloudFormation, providing flexibility in deployment. Once set up, the system automatically handles credential refreshes, ensuring transfers remain secure and uninterrupted. This feature is designed to streamline data migration and synchronization workflows across cloud environments.

The update reflects AWS’s ongoing efforts to enhance DataSync’s security and interoperability with major cloud platforms. By supporting OIDC, AWS provides a standardized method for authentication that aligns with modern identity management practices. Organizations can now leverage DataSync for secure, cross-cloud data transfers without compromising on security or compliance. For detailed instructions, users are directed to the AWS DataSync User Guide.