Skip to main content

​
How Harmonia uses it

Amazon Cognito establishes operator identity and workspace membership. Separate IAM roles identify ECS Fargate, AgentCore, and automation workloads. AWS Secrets Manager keeps provider credentials server-side; browsers receive neither integration secrets nor machine credentials.

Cognito Authentication

Operator authentication and tenant scope.

IAM roles

Machine identity and least privilege.

AWS Secrets Manager

Credential storage and delivery.

​
Evidence status

Repository policy and tests verify access checks locally. Production IAM grants, secret versions, and authenticated access must be verified in the target project without exposing secret values.

Cognito identity

Google federation with server-owned sessions.

AWS runtime roles

Separate AWS task and managed-service roles with application-level authority checks.

AWS Secrets Manager

How Harmonia supplies provider credentials to ECS Fargate without placing secrets in code or client bundles.
Last modified on September 14, 2026