MesosCon Europe 2017

IAM instance profiles are used to limit access to AWS resources by an instance. In this presentation, Zain Malik will show you how to use IAM profile with Mesos tasks.

Right now the alternative is to use same IAM instance profile for all tasks in Mesos. Or saving AWS credentials inside the containers.

The problem comes when one container requires broader permissions or access to different resources than the original instance profile had. Without a proper isolation solution in place, all other tasks can access the resources, which is not a very desirable situation in some cases.

In this presentation, Zain will show how to have isolated IAM profiles for each task, without saving the credentials inside the container. To do that, he will use mesos2iam (https://github.com/schibsted/mesos2iam) to retrieve credentials in a transparent way for the tasks running in Mesos cluster.