I'm very sorry to ask such a broad question, but I haven't found any direct answer when I and colleagues have searched the internet.
We have AWS Lambdas that needs to authenticate and authorize from an Azure AD. How do we accomplish this?
I understand that the question is very broad and hard to answer, but if someone knows of a good guide or some step by step instructions that can help me get going I would appreciate it greatly.
Forget the "AWS Lambda" part. Consider it as external app that needs to get token from Azure AD in order to have it's requests authorized. You can achieve this using Azure AD REST API.
https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-protocols-oauth-code
Microsoft offer the Active Directory Authentication Library. Information on ADAL can be found here:
In terms of identity and access management, you have a few options but I would recommend the use of Azure Service Principals. More information can be found:
https://docs.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals
If you're not familiar with Azure AD, or OAuth, and are inquisitive enough, you should really start at the beginning:
https://docs.microsoft.com/en-us/azure/active-directory/develop/
The docs are written plainly and very well, in my opinion.
