How Harmonia uses it
Amazon Cognito establishes operator identity and workspace membership. Separate IAM roles identify ECS Fargate, AgentCore, and automation workloads. AWS Secrets Manager keeps provider credentials server-side; browsers receive neither integration secrets nor machine credentials.
Cognito Authentication
Operator authentication and tenant scope.
IAM roles
Machine identity and least privilege.
AWS Secrets Manager
Credential storage and delivery.
Evidence status
Repository policy and tests verify access checks locally. Production IAM grants, secret versions, and authenticated access must be verified in the target project without exposing secret values.Cognito identity
Google federation with server-owned sessions.
AWS runtime roles
Separate AWS task and managed-service roles with application-level authority checks.
AWS Secrets Manager
How Harmonia supplies provider credentials to ECS Fargate without placing secrets in code or client bundles.
Last modified on September 14, 2026
