Amazon MWAA

Amazon Managed Workflows for Apache Airflow (MWAA) is the managed AWS service that offers an up-and-running Apache Airflow environment.

To integrate MWAA with Sifflet, you can follow the steps detailed below.

1. Create an AWS policy to access MWAA

First, you need to create the following policy that grants read access to your MWAA environment.

• In the AWS console, go to IAM -> Policies, click on Create policy
• Copy the following JSON and make the following changes:
  • replace {your-region} with your own region
  • replace {YOUR_ACCOUNT_ID} with your own AWS account ID
  • replace {your-environment-name} with the name of your MWAA environment

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "airflow:CreateWebLoginToken",
      "Resource": [
        "arn:aws:airflow:{your-region}:YOUR_ACCOUNT_ID:role/{your-environment-name}/Viewer"
      ]
    }
  ]
}

• On the next screen, you can choose the name of the policy, for instance, sifflet_mwaa_policy

2. Create an AWS role with a custom trust policy

Once the policy is created, you can then create a new AWS role that Sifflet will use to interact with MWAA.
The main steps are:

• In the AWS console, go to IAM -> Roles, click on Create role
• Choose Custom trust policy and copy the following JSON.
  Replace <Sifflet AWS Role ARN> with the correct value for your instance, that you will get in Sifflet, by going to Settings and then Integration Preferences.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": [
                    "<Sifflet AWS Role ARN>"
                ]
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

• On the next screen, choose the previously created policy, sifflet_mwaa_policy in our example
• On the next screen, you can choose the name of the role, for instance, sifflet_mwaa_role
• You can now access your newly created role. Note its ARN, you will need it to connect Sifflet to MWAA. It will look like arn:aws:iam::123456789101:role/sifflet_mwaa_role

3. Create a new source in Sifflet

The last step consists of creating a new source in Sifflet for your MWAA integration by providing the following details:

• Environment name: The name of your MWAA environment as it appears on AWS.
• AWS region: The region in which your environment is located.
• AWS role ARN: The ARN of the AWS role mentioned in the previous step.