andreabedini / aws-credentials-from-saml Goto Github PK

Doesn't work for China regions. Is there any work-around to make it working for CN?

Hello,

I'm trying to setup some scripting for getting session creds for my aws-cli and stepped into some issue.
In case you have multiple roles to assume (see attachment), credentials file is updated at least twice. On first update typically there temporary session credentials (with lifetime limited to ~15 minutes). Second update gives you "long-term" credentials (limited either with aws or your org settings). Since file API for Firefox is optimized, it is very hard to catch second file update with something like inotify (at least for me, on Linux). Is there any way to get exact second set of creds?

UPD: I forgot main issue: if some process started right after first file update and before second (which could be seconds, because I need manually select role and click Sign in) it could stuck (like terraform does) or fail with message like An error occurred (ExpiredToken) when calling the %any% operation: The provided token has expired.

See discussion in #1

See discussion in #1