base kmsauth token on bastion_user instead of remote_usernames

Netflix · Apr 30, 2017 · 073fdb4 · 073fdb4
1 parent d5a1c1f
commit 073fdb4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bless/aws_lambda/bless_lambda.py b/bless/aws_lambda/bless_lambda.py
@@ -143,7 +143,7 @@ def lambda_handler(event, context=None, ca_private_key_password=None,
                 )
                 # decrypt_token will raise a TokenValidationError if token doesn't match
                 validator.decrypt_token(
-                    "2/user/{}".format(request.remote_usernames),
+                    "2/user/{}".format(request.bastion_user),
                     request.kmsauth_token
                 )
             except TokenValidationError as e: