Releases: synfinatic/aws-sso-cli
v1.15.1
Overview
- Added fish shell helperst #361
What's Changed
- Bump squidfunk/mkdocs-material from 9.5.3 to 9.5.17 by @dependabot in #826
- helper functions for fish (#361) by @zickzackv in #808
- Bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #840
- fix: testing for AWS_SSO_PROFILE by @zickzackv in #839
- Bump golang.org/x/net from 0.19.0 to 0.23.0 by @dependabot in #835
- Bump squidfunk/mkdocs-material from 9.5.17 to 9.5.20 by @dependabot in #842
- Add govulncheck by @synfinatic in #843
- release v1.15.1 by @synfinatic in #844
New Contributors
- @zickzackv made their first contribution in #808
Full Changelog: v1.15.0...v1.15.1
v1.15.0
What's Changed
- fix workflow variables for go version by @synfinatic in #780
- feature: add support for installing completions at package build time by @ghthor in #779
- Bump golangci/golangci-lint-action from 3 to 4 by @dependabot in #773
- Bump codecov/codecov-action from 3 to 4 by @dependabot in #769
- support
~
and $HOME for UrlExecCommand by @synfinatic in #822 - release 1.15.0 by @synfinatic in #825
Full Changelog: v1.14.3...v1.15.0
v1.14.3
Overview
- Update dependencies
- Statically link Linux binaries (CGO_ENABLED=0)
- Fix crash when users have no AWS roles available
What's Changed
- do brew update for release by @synfinatic in #642
- Bump actions/stale from 5 to 8 by @dependabot in #643
- add script to validate status for release by @synfinatic in #645
- fix release-check logic and remove target by @synfinatic in #646
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.22.7 to 1.23.0 by @dependabot in #648
- Bump github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 by @dependabot in #647
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.23.0 to 1.24.0 by @dependabot in #649
- Bump squidfunk/mkdocs-material from 9.4.6 to 9.4.7 by @dependabot in #656
- add contributing by @synfinatic in #680
- Bump golang.org/x/term from 0.13.0 to 0.14.0 by @dependabot in #689
- Bump squidfunk/mkdocs-material from 9.4.7 to 9.4.8 by @dependabot in #690
- Bump actions/setup-go from 4 to 5 by @dependabot in #725
- Bump actions/stale from 8 to 9 by @dependabot in #728
- Bump github/codeql-action from 2 to 3 by @dependabot in #734
- Bump actions/download-artifact from 3 to 4 by @dependabot in #735
- Bump actions/upload-artifact from 3 to 4 by @dependabot in #736
- Bump github.com/dvsekhvalnov/jose2go from 1.5.0 to 1.6.0 by @dependabot in #744
- Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #739
- ignore dependabot in auto-close by @synfinatic in #745
- Bump crazy-max/ghaction-import-gpg from 6.0.0 to 6.1.0 by @dependabot in #746
- Bump squidfunk/mkdocs-material from 9.4.8 to 9.5.3 by @dependabot in #742
- Bump golang.org/x/net from 0.17.0 to 0.19.0 by @dependabot in #716
- Bump golang.org/x/term from 0.14.0 to 0.15.0 by @dependabot in #719
- Don't crash with 0 AWS accounts by @synfinatic in #751
- Bump golang.org/x/term from 0.15.0 to 0.16.0 by @dependabot in #748
- CGO_ENABLED=0 for Linux by @synfinatic in #756
- Document support for firefox Multi-Account Containers plugin by @synfinatic in #762
Full Changelog: v1.14.2...v1.14.3
v2.0.0-beta1
Overview
This is a significant release with some key changes regarding configuration defaults and user experience which I hope makes aws-sso
easier and more consistent to use. The major changes (please see the change log for more details) are:
- Now requires to run
aws-sso login
to use your SSO credentials to login to AWS Identity Center. - New default Profile format (used for
$AWS_PROFILE
and--profile
flag) uses the Account name/alias instead of the AccountId. - Removed the
AutoConfigCheck
config option.aws-sso
will now check the number of authorized AWS Accounts atlogin
to see if the cache needs to be updated. If you have been granted a new role to an existing account, you will need to runaws-sso cache
manually.
I consider this beta quality as I am using this myself on a daily basis.
Changelog
Bugs
- No longer ignore the
--threads
CLI option
New Features
- Require running
aws-sso login
. No more auto-login. #291 login
does a quick cache invalidation check using the AWS AccountIDs #576- New default ProfileFormat uses AccountAlias instead of AccountId
Changes
aws-sso
commands other thancache
andlogin
no longer can trigger a cache refresh or
update of~/.aws/config
file
Removed Commands, Config Options and Flags
- Remove
config
,config-profiles
andcompletions
commands
and replace withsetup
- Remove
flush
command. Uselogout
instead - Remove
--no-cache
flag - Remove
CacheRefresh
configuration option.aws-sso
will only update the cache
when you ask it to viaaws-sso cache
- Remove
tags --force-update
flag - Remove
AutoConfigCheck
configuration option. - Remove references to all deprecated features:
AccountIdStr()
function forProfileFormat
.AccountIdStr
field is replaced byAccountIdPad
inlist
command andListFields
in config.yamlARN
field is replaced byArn
inlist
command andListFields
in config.yamlExpiresStr
field is replaced byExpires
inlist
command andListFields
in config.yamlFirefoxOpenUrlInContainer
config optionConfigUrlAction
config option
What's Changed
- do brew update for release by @synfinatic in #642
- Bump actions/stale from 5 to 8 by @dependabot in #643
- add script to validate status for release by @synfinatic in #645
- fix release-check logic and remove target by @synfinatic in #646
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.22.7 to 1.23.0 by @dependabot in #648
- Bump github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 by @dependabot in #647
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.23.0 to 1.24.0 by @dependabot in #649
- Remove
CacheRefresh
config option by @synfinatic in #655 - remove --no-config-check from shell integration by @synfinatic in #657
- Fix threads by @synfinatic in #659
- Remove
AutoConfigCheck
config option by @synfinatic in #660 - Remove deprecated by @synfinatic in #664
Full Changelog: v1.14.2...v2.0.0-beta1
v1.14.2
Changes
Bugs
- Fix
console
command when accessing China/US Gov #634
Changes
- Now use region/partition specific API Endpoint when retrieving AWS Console URLs from
IAM Identity Center #634
What's Changed
- update release.md by @synfinatic in #633
- auto close inactive issues & PRs by @synfinatic in #640
- Use a region specific federated url per the AWS docs. by @synfinatic in #635
- release v1.14.2 by @synfinatic in #641
Full Changelog: v1.14.1...v1.14.2
v1.14.1
Note: This is likely the final v1.x release as I start working on v2 which will break CLI command compatibility with v1.
Changes
Bugs
- Fix bug where JsonStore was not being created #612
- Fix fish shell completion
- Do not fall back to interactive prompt when provided CLI args #567
New Features
- Config Wizard now prompts for
ProfileFormat
#590
Changes
- Documentation is now built via Docker #587
- Improved demos in documentation #551
- Update many dependencies
What's Changed
- sign tags so they are verified by @synfinatic in #582
- Start using mkdocs for managing the documentation by @synfinatic in #583
- fix path to mkdocs src by @synfinatic in #584
- tweak readme by @synfinatic in #585
- session and transitive tags are not applicable to AWS SSO by @synfinatic in #588
- update demos and docs by @synfinatic in #589
- small fix by @synfinatic in #591
- changing mkdocs.yml should update the docs by @synfinatic in #592
- Improve docs by @synfinatic in #593
- fix update docs action by @synfinatic in #594
- bump update docs by @synfinatic in #595
- improve dependabot by @synfinatic in #596
- run workflows when changed by @synfinatic in #608
- Bump ubuntu from 20.04 to 22.04 by @dependabot in #602
- Bump actions/setup-go from 1 to 4 by @dependabot in #604
- Bump actions/checkout from 2 to 4 by @dependabot in #603
- Bump github.com/aws/aws-sdk-go-v2/config from 1.18.15 to 1.18.45 by @dependabot in #599
- add ProfileFormat to config wizard by @synfinatic in #607
- Bump gopkg.in/ini.v1 from 1.66.4 to 1.67.0 by @dependabot in #600
- Bump codecov/codecov-action from 2 to 3 by @dependabot in #605
- Bump crazy-max/ghaction-import-gpg from 5.1.0 to 6.0.0 by @dependabot in #606
- udpate changelog by @synfinatic in #609
- Bump github.com/knadh/koanf from 0.16.0 to 1.5.0 by @dependabot in #597
- use variable in workflows for go version by @synfinatic in #615
- Automatically create store.json file for JsonStore by @synfinatic in #613
- replace CodeQL autobuild with manual step by @synfinatic in #621
- Bump github.com/alecthomas/kong from 0.7.1 to 0.8.1 by @dependabot in #620
- Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 by @dependabot in #619
- Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.19.4 to 1.22.7 by @dependabot in #617
- Bump github.com/goccy/go-yaml from 1.9.4 to 1.11.2 by @dependabot in #616
- Fix fish shell completions by @synfinatic in #622
- run workflows on all PR's, not just those off main by @synfinatic in #623
- gh actions need pr types? by @synfinatic in #624
- Bump github.com/stretchr/testify from 1.7.1 to 1.8.4 by @dependabot in #629
- Bump github.com/aws/aws-sdk-go-v2/config from 1.18.45 to 1.19.0 by @dependabot in #627
- Do not fall back to interactive prompt when user provides flags by @synfinatic in #625
- release v1.4.1 by @synfinatic in #631
Full Changelog: v1.14.0...v1.14.1
v1.14.0
Changes
Bugs
- Update net/http to v1.17.0 to fix HTTP/2 server bug CVE-2023-39325
Changes
- Print user code during SSO authentication workflow #572
New Features
- Add
--no-cache
toconsole
,config-profiles
,exec
andlist
#574
What's Changed
- update quickstart docs by @synfinatic in #570
- fix formatting in faq by @synfinatic in #571
- print the user_code during login to verify the code by @PacoVK in #573
- Add
--no-cache
flag by @synfinatic in #575 - fix managed env vars by @synfinatic in #578
- fix wording of auth code message by @synfinatic in #579
- tag v1.14.0 and tweak verify message by @synfinatic in #581
New Contributors
Full Changelog: v1.13.1...v1.14.0
v1.13.1
[v1.13.1] - 2023-08-28
Bugs
- Fix fetching creds from ECS Server #557
- ECS Server now includes
RoleArn
in output #561 - Fix selection of default browser in advanced guided setup #563
Changes
- ECS Server API is now more RESTful and fully document the API
- Default profile
AWS_CONTAINER_CREDENTIALS_FULL_URI
is nowhttp://localhost:4144/
- Slotted profile
AWS_CONTAINER_CREDENTIALS_FULL_URI
is nowhttp://localhost:4144/slot/<profile>
aws-sso ecs list
andaws-sso ecs profile
now return the same output formatmake tags
now uses gotags
What's Changed
- improve FAQ regarding ProfileFormat by @synfinatic in #554
- broken ecs server stuff. Change the REST API by @synfinatic in #556
- fix get /profile by @synfinatic in #559
- update make tags by @synfinatic in #560
- Include RoleArn and invalid bad routes by @synfinatic in #562
- fix default browser selection in advanced guided setup by @synfinatic in #564
- release 1.13.1 by @synfinatic in #565
Full Changelog: v1.13.0...v1.13.1
v1.13.0
Bugs
- No longer crash during guided setup if user presses
<Del>
#531 - No longer error out on simple input errors during guided setup
- Do not create invalid
maxretry
andmaxbackoff
in SSO Instance during config #536 - Ctrl-C now exits the guided setup
- Running
aws-sso config
with a missing config file no longer prompts you to back it up #537 - Document ugly fact that
AccountAlias
is really the AWS Account Name #534 ecs load
now updates history #519- ECS Server now generates errors per AWS docs
Changes
- Guided setup is now more simple unless user provides the
--advanced
flag #530 - Guided setup now strips leading and trailing spaces for string input
- Revert #491 so SSO auth uses Firefox containers
New Features
- Added logout command which invalidates the browser session and all credentials #526
AutoConfigCheck
now honors the$AWS_CONFIG_FILE
variable #540config-profiles
now supports the--aws-config
flag- Added ecs list command to list profiles in named slots #517
- Add AuthUrlAction to override UrlAction during SSO Authentication. #524
What's Changed
- improve guided setup wizard by @synfinatic in #532
- Add logout command by @synfinatic in #533
- Do not generate bogus config statements by @synfinatic in #538
- don't prompt to backup missing files by @synfinatic in #539
- AutoConfigCheck now honors AWS_CONFIG_FILE by @synfinatic in #541
- document ugly truth about AccountAlias by @synfinatic in #542
ecs load
now saves to history by @synfinatic in #543- Add
aws-sso ecs list
command by @synfinatic in #544 - Add
AuthUrlAction
to overrideUrlAction
for SSO auth by @synfinatic in #545 - Fix error messages to match AWS API expectations by @synfinatic in #546
- update changelog for v1.13.0 by @synfinatic in #547
Full Changelog: v1.12.0...v1.13.0
v1.12.0
This release adds support for the emulating the AWS ECS Metadata service for exposing IAM role credentials over HTTP and significant improvements for users with many AWS accounts.
Bugs
- Prevent crashing with large number of accounts #520
console
command now always honors the--duration
flag
Changes
- CacheRefresh now defaults to 168 hours (7 days)
- FullTextSearch is enabled by default for interactive
list
mode. - MaxRetry defaults to 10
- MaxBackoff defaults to 5
New Features
- Add ECS Server mode to support
$AWS_CONTAINER_CREDENTIALS_FULL_URI
#398 - Add full-text search for interactive
list
mode #504 - Improve performance refreshing the list of accounts & roles
- Add
MaxRetry
andMaxBackoff
config options
What's Changed
- add
release-tag
make target by @synfinatic in #510 - Add FullTextSearch by @synfinatic in #512
- update copyright to 2021-2023 by @synfinatic in #514
- Document limitation with ListAccountRoles by @synfinatic in #525
- do not re-auth on backoff by @synfinatic in #522
- Add security.md docs by @synfinatic in #527
- Ecs server by @synfinatic in #513
Full Changelog: v1.11.0...v1.12.0