-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
mfa_serial support for user profiles #529
Comments
Started to work on implementation in botocore boto/botocore#1399 |
Also implementation to support cache in aws-clie aws/aws-cli#3174 |
@JordonPhillips I have finished work on mfa token support for aws-cli. Could you please review them? It is very common workflow for folks to use MFA for their environments, and a lot mostly just use their own wrappers on top of awscli, which seems like overkill. I have installed both botocore and awscli from my branches to my local pip and did verification that fix is working. If there are anything else required to add this fix, please let me know. I will be happy to add. |
This doesn't need both an issue and a PR. Lets keep the discussion in the Pull Request. |
…ons_Images test requirement (#3172) * chore: Update dateparser to 1.0 * Move public ECR limited test cases to Canary tests
Our team just put out a recent proposal in aws/aws-cli#6828 detailing improvements to the contribution process. We are working through open PRs and issues. This is a popular feature request that has a couple of open PRs: aws/aws-cli#3174, boto/botocore#1399. This feature effects credential loading and so it will need a design to be reviewed and approved before any work on a PR can start. I will be marking this feature request as blocked in accordance with the new process, pending a design outline in this issue. |
Regarding this point mentioned earlier:
The design element of this proposed feature request needs to be considered at a cross-SDK level as it involves user profiles. So I'm going to transfer this issue to our cross-SDK repository for continued tracking going forward. We encourage others to 👍 the issue if interested in seeing the feature request implemented, and comment if you have additional use cases or general information to share. |
So, heat-death of the universe before you guys merge a dozen line fix authored 5 years ago? This is NOT HARD. The other API languages the changes are probably almost identical to the Boto version. Forcing users to write their own 'assum-role|session' wrapper scripts is just insane. |
I know that it is currently possible to specify
mfa_serial
on profiles and cli tool will automatically ask for the MFA token to authenticate when you will make a call under this profile when assume role is used.Curious is there are any reason not to support mfa on default (source) profile, like to be able to attach this policy to all admin users
And after that allow cli tool to use config like
So in that case I will be able to call
And that will ask me for the mfa token if it is expired or has not been set.
The text was updated successfully, but these errors were encountered: