Provide secure access to stored S3 credentials from Light UX applications

Description:

Currently, S3 Service Credentials (Access Key ID / Secret Access Key) can be configured and stored in the MREF Admin Console.

However, there is no supported way for a Light UX application to retrieve or use these credentials at runtime.

For example, a Light UX application needs to upload files to an S3 bucket. As the credentials cannot currently be accessed automatically, users are required to manually enter them each time they perform an upload.

Enhancement Request:

Provide a supported and secure mechanism allowing Light UX applications to access credentials or secrets already stored in MREF/MAS, without exposing sensitive information in client-side code or requiring manual user input.

This could be achieved through:

• A dedicated API or endpoint to retrieve stored credentials securely.
• A server-side mechanism allowing Light UX applications to use configured credentials without exposing them to the client.
• Any other officially supported solution for managing and accessing secrets at runtime.

Expected Benefits:

• Avoid repeated manual entry of credentials by end users.
• Reuse credentials already configured in MREF.
• Ensure sensitive information remains securely managed and is never hard-coded or exposed in client-side code.
• Facilitate secure integrations between Light UX applications and external services such as AWS S3.