Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for AWS SSO #123

Closed
wants to merge 1 commit into from
Closed

Conversation

antonosmond
Copy link

Annoyingly the AWS SDK for Go doesn't natively support credentials via SSO access tokens.
It does however provide the ability to create a custom credential provider - see here
This PR adds a custom credential provider capable of utilising the SSO token from the SSO token cache.
It's enabled via the env var AWS_SSO and relies on the AWS_PROFILE env var to get the SSO account ID and role name from the AWS config file in ~/.aws/config.

@b4nst
Copy link

b4nst commented Jan 13, 2021

Would love to see this implemented. Currently my workaround is to use aws2-wrap but it's really cumbersome

@urz9999
Copy link

urz9999 commented Jan 14, 2021

In case like this one or other similar cases where AWS SSO result in incompatibilities with your library and you don't want to play with workarounds or complicated fixes, maybe you can give a try to our open-source project: https://github.com/Noovolari/leapp. It deals with AWS SSO authentication and accounts/roles retrieval then it creates short-lived temporary credentials in .aws/credentials to maximize compatibility with third party tools / sdks.

@antonosmond
Copy link
Author

Closing this as AWS have finally added SSO support in the SDK:
https://github.com/aws/aws-sdk-go/releases/tag/v1.37.0
Once helm-s3 is updated to use the new SDK, it should work with SSO credentials

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants