This repository has been archived by the owner on Nov 8, 2021. It is now read-only.
Allow getting users and keys from another AWS account #22
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Implements #21
When the
AssumeRole
variable in both scripts is set to the ARN of a role in another account, use that role to get the users and keys.The usecase is described in the issue:
The InstanceRole attached to the EC2 instance(s) should have permissions to assume this role (example given in the showcase CF template) and the 'management' account should have setup this role and allow the EC2 accounts access to assume this role.
The two shellscripts are now running on our instances (in test still, but it works).
The showcase CF template has not been tested, but I think this should be it. But it can be broken, it needs testing (time is short, maybe later I can test it)
Documentation is lacking, but I hope it's clear in the description.