Skip to content

Tighten file permissions for virtual MFA bootstrap output#10194

Merged
AndrewAsseily merged 1 commit intoaws:developfrom
manthan29jamdagni:fix-iamvirtmfa-file-permissions
Apr 8, 2026
Merged

Tighten file permissions for virtual MFA bootstrap output#10194
AndrewAsseily merged 1 commit intoaws:developfrom
manthan29jamdagni:fix-iamvirtmfa-file-permissions

Conversation

@manthan29jamdagni
Copy link
Copy Markdown
Contributor

@manthan29jamdagni manthan29jamdagni commented Apr 7, 2026

Description of changes:

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Restrict MFA seed files to 0600 (owner-only) to prevent other
local users from reading the bootstrap data.
@AndrewAsseily AndrewAsseily changed the title Fix file permissions for virtual MFA bootstrap output Tighten file permissions for virtual MFA bootstrap output Apr 7, 2026
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 7, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.42%. Comparing base (c4681b5) to head (74904e4).
⚠️ Report is 254 commits behind head on develop.

Additional details and impacted files
@@             Coverage Diff             @@
##           develop   #10194      +/-   ##
===========================================
+ Coverage    93.39%   93.42%   +0.03%     
===========================================
  Files          210      210              
  Lines        17052    17219     +167     
===========================================
+ Hits         15925    16087     +162     
- Misses        1127     1132       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link
Copy Markdown
Contributor

@AndrewAsseily AndrewAsseily left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you! 🏆

@AndrewAsseily AndrewAsseily merged commit 68811b5 into aws:develop Apr 8, 2026
49 checks passed
AndrewAsseily added a commit that referenced this pull request Apr 8, 2026
aws-sdk-python-automation added a commit that referenced this pull request Apr 9, 2026
* release-1.44.76:
  Bumping version to 1.44.76
  Update changelog based on model updates
  Allow SSEC bucket decryption in s3 integ tests (#10203)
  Tighten file permissions for virtual MFA bootstrap output (#10194)
  Tighten file permissions when writing credentials in CodeArtifact login.py (#10191)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants