Plain Credentials with get-session-token about leapp HOT 3 CLOSED

Please be aware of the following limitations of this new approach:

The temporary security credentials created by GetSessionToken can be used to make API calls to any AWS service with the > following exceptions:

• You cannot call any IAM API operations unless MFA authentication information is included in the request.
• You cannot call any STS API except AssumeRole or GetCallerIdentity .

from leapp.

Thank you @hoegertn, that's an important point!

I would like to attach a link to the documentation where the statement you quoted is written: https://docs.aws.amazon.com/cli/latest/reference/sts/get-session-token.html

I think we've to take into account the possibility to add a checkbox during Plain Account (i.e. IAM User) creation, allowing Leapp to:

1. retrieve static credentials that you specified during Plain Account creation

or

2. generate new temporary credentials (using STS get-session-token API) from static ones.

from leapp.

Enhancement done in commit b65c5ea, new release soon

from leapp.