Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support caching STS credentials #109

Closed
jmhale opened this issue Jun 7, 2017 · 6 comments
Closed

Support caching STS credentials #109

jmhale opened this issue Jun 7, 2017 · 6 comments

Comments

@jmhale
Copy link

jmhale commented Jun 7, 2017

awless doesn't cache the temporary STS credentials returned by AWS, so when MFA is enforced on an account, the MFA token must be entered for every command.

This is contrary to how awscli operates, which only re-prompts for MFA when the STS credentials expire.

This was referenced and responded to in #60, but I didn't see an actual issue opened for it to track.

@fxaguessy
Copy link
Contributor

As far as I know, there is currently no way in aws-sdk-go to cache credentials between sessions. I just created an issue on aws-sdk-go (aws/aws-sdk-go#1329) to confirm that.
However, we agree, this feature is essential for MFA to be effectively usable.

@fxaguessy
Copy link
Contributor

Hello @jmhale and @deinspanjer, I just added in 5a73223, available on master, a basic implementation to support STS credentials caching for MFA (for now, credentials are cached for 15 minutes).
Could you test that it works for your use cases ?

@xp-1000
Copy link

xp-1000 commented Jul 22, 2017

Hi @fxaguessy, I just tested and it works like a charm even with multiple accounts assume roles.
Thank you I will be able to start using this tool

@deinspanjer
Copy link
Contributor

How exactly did you install? I've been using brew, but I get an error trying to instead HEAD:

==> Installing awless from wallix/awless
==> Cloning https://github.com/wallix/awless.git
Updating /Users/dre/Library/Caches/Homebrew/awless--git
==> Checking out branch master
==> go run release.go -tag vHEAD-4073113 -brew -arch amd64 -os darwin
Error: No such file or directory - awless

@jmhale
Copy link
Author

jmhale commented Jul 23, 2017

@fxaguessy Works great! Thanks!

@fxaguessy
Copy link
Contributor

@xp-1000 @jmhale , great to know, thanks for your feedback !

@deinspanjer, awless in homebrew can not be installed at a specific commit (I just created an issue at wallix/homebrew-awless#1 to support that). If you want to install the HEAD version, you can run go get -u github.com/wallix/awless to fetch and build the last version. Otherwise, you just have to wait the release of v0.1.2, which might happen soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants