Fork me on GitHub
#aws
<
2021-04-16
>
kenny18:04:43

It seems like aws-api does not support https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-role.html as a credential provider. I have a profile in my config file with a role_arn and source_profile specified. If I try using that profile via AWS_PROFILE, aws-api will log that it cannot fetch from aws profiles file. Thinking I'll just copy that code out and add support for it locally. I'm not missing existing functionality, am I? https://github.com/cognitect-labs/aws-api/blob/5843c22679f28dd70fa3180e5a2487ebab7eb770/src/cognitect/aws/credentials.clj#L241-L243

lukasz18:04:36

@U083D6HK9 writing your own credentials providers is pretty straightforward, we had to add our own for credentials fetched via SSO locally

rutledgepaulv01:04:08

I made this to address some of these missing auth modes: https://github.com/RutledgePaulV/aws-api-credential-providers

kenny20:04:35

Don't have time to make an issue atm. For those interested, I published my first cut from our internal version here. Anyone is welcome to use it. https://gist.github.com/kennyjwilli/c640f76845451cb145cedaee790d4f9a.