Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport of deps: Bump github.com/aws/aws-sdk-go@v1.37.0 into v0.14 #27661

Conversation

teamterraform
Copy link
Contributor

Backport

This PR is auto-generated from #27620 to be assessed for backporting due to the inclusion of the label 0.14-backport.

WARNING automatic cherry-pick of commits failed. Commits will require human attention.

The below text is copied from the body of the original PR.


Changes:

* backend/s3: Support for AWS Single-Sign On (SSO) cached credentials

Updated via:

go get github.com/aws/aws-sdk-go@v1.37.0
go mod tidy

Please note that Terraform CLI will not initiate or perform the AWS SSO login flow. It is expected that you have already performed the SSO login flow using AWS CLI using the aws sso login command, or by some other mechanism before executing Terraform. More precisely, this credential handling must find a valid non-expired access token for the AWS SSO user portal URL in ~/.aws/sso/cache. If a cached token is not found, is expired, or the file is malformed an error will be returned.

You can use configure AWS SSO credentials from the AWS shared configuration file by specifying the required keys in the profile:

sso_account_id
sso_region
sso_role_name
sso_start_url

For example, the following defines a profile "devsso" and specifies the AWS SSO parameters that defines the target account, role, sign-on portal, and the region where the user portal is located. Note: all SSO arguments must be provided, or an error will be returned.

[profile devsso]
sso_start_url = https:my-sso-portal.awsapps.com/start
sso_role_name = SSOReadOnlyRole
sso_region = us-east-1
sso_account_id = 123456789012

Additional Resources

@teamterraform teamterraform requested a review from bflad February 2, 2021 13:21
@hashicorp-cla
Copy link

CLA assistant check

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes


temp seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA. If you already have a GitHub account, please add the email address used for this commit to your account.

Have you signed the CLA already but the status is still pending? Recheck it.

@codecov
Copy link

codecov bot commented Feb 2, 2021

Codecov Report

Merging #27661 (b372dda) into v0.14 (965e9a1) will increase coverage by 0.00%.
The diff coverage is n/a.

Impacted Files Coverage Δ
terraform/evaluate.go 53.30% <0.00%> (+0.41%) ⬆️
dag/marshal.go 54.79% <0.00%> (+1.36%) ⬆️
terraform/node_resource_plan.go 97.19% <0.00%> (+1.86%) ⬆️

@jbardin jbardin closed this Feb 2, 2021
@jbardin jbardin deleted the backport/v-aws-sdk-go-v1.37.0/instantly-sure-mantis branch February 2, 2021 13:40
@ghost
Copy link

ghost commented Mar 5, 2021

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@ghost ghost locked as resolved and limited conversation to collaborators Mar 5, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants