AWS_SHARED_CREDENTIALS_FILE Overwritten By Default about gossm HOT 6 CLOSED

mfa credential doesn’t set default credential forcibly.

default credential has used it in default.
But if mfa credential file is to exist and to validate, used it.

from gossm.

@gjbae1212 if a user does not set AWS_SHARED_CREDENTIALS_FILE, then the default behavior for the golang AWS SDK is not used (gossm doesn't try to use $HOME/.aws/credentials, but instead replaces the value with $HOME/.aws/credentials_mfa on this line

from gossm.

you should read more than code.

from gossm.

When attempting to use gossm, I get the following error:

[err] [err][cmd.initConfig:209] [err][internal.NewSharedConfig:61] failed to load assume role *my role arn*, of profile default, <nil>

If I run this, the error goes away:

export AWS_SHARED_CREDENTIALS_FILE=$HOME/.aws/credentials

In my setup, I'm performing role assumption and handling MFA outside of gossm.

This is what my ~/.aws/credentials file looks like:

[default]
aws_session_token     = session token
aws_access_key_id     = temporary access key id
aws_secret_access_key = temporary secret key

[my-profile]
role_arn       = role arn
source_profile = default

This is what my ~/.aws/config file looks like:

[default]
output     = json
mfa_serial = mfa arn

[profile my-profile]
role_arn       = role arn
source_profile = default

Let me know if you think I'm using gossm wrong. Thanks for your help!

from gossm.

Update gossm v1.4.2. Ignore a panic.

from gossm.

Thanks for addressing this @gjbae1212 !

I think the issue might still exist:

$ gossm --version
gossm version v1.4.2
$ gossm start 
[err] [err][cmd.initConfig:249] [err][internal.NewSharedConfig:61] failed to load assume role *my-role-arn*, of profile default, <nil>

It seems you're open to having gossm change to make this use-case work, though. I'll try to get you a PR addressing this today.

from gossm.