Currently, when configuring Amazon SNS alerts in Fivetran HVR, the configuration requires an explicit AWS Access Key ID and Secret Access Key.

 

To improve security it would be good to have the ability to utilize IAM Roles instead of long-lived static credentials. Managing secret keys introduces a security risks and compliance overhead.

 

• IAM Instance Profiles / Roles: Allow the HVR Hub running on AWS infrastructure (such as EC2, ECS, or EKS) to inherit permissions from its attached IAM Role via the AWS Instance Metadata Service (IMDS) similarly to what happen when configuring connection to other systems such as AWS S3.

• Compliance: Aligns HVR deployments with strict enterprise security policies that completely ban long-lived static IAM user access keys.
• Reduced Maintenance: Eliminates the operational overhead of rotating secret keys before they expire.