Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Copy credentials from ~/.aws/cli/cache/ to .aws/credentials file #72

Closed
arvindkgs opened this issue Feb 9, 2021 · 1 comment
Closed
Labels
question Further information is requested

Comments

@arvindkgs
Copy link

Is your feature request related to a problem? Please describe.
Older versions of terraform does not support AWS CLI v2 (that uses .aws/cli/cache), rather uses .aws/credentials file. However AWS SSO login through Leapp only updates the .aws/cli/cache file with temporary credentials.

Describe the solution you'd like
Copy credentials from .aws/cli/cache into .aws/credentials file

Describe alternatives you've considered
Manually copy paste credentials from .aws/cli/cache file to .aws/credentials

Additional context
While newer terraform AWS provider works with .aws/cli/cache, older versions do not work - hashicorp/terraform-provider-aws#10851 . Many companies still use older terraform, so this would help all of us!

@arvindkgs arvindkgs added the enhancement New feature or request label Feb 9, 2021
@andreacavagna01
Copy link
Contributor

This is how Leapp actually works.

Leapp store the access token of AWS Single Sign-On in an encrypted file and then generate only temporary credentials in the ~/.aws/credentials file, which is automatically rotated by the App.

By doing so, every short-lived credential generated by Leapp is fully compatible with every version of Terraform, and every other tool

@andreacavagna01 andreacavagna01 added question Further information is requested and removed enhancement New feature or request labels Feb 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants