aws-samples / boto-session-manager-project Goto Github PK

def assume_role(self, role_arn, ...):
    # code to set `extra_args` dict of AssumeRole parameters goes here

    botocore_session = self.boto_ses._session

    credentials = botocore_session.get_credentials()
    if not credentials:
        # Error out now rather than wait for the new session to get used
        raise NoCredentialsError

    credential_fetcher = AssumeRoleCredentialFetcher(
        botocore_session.create_client,
        credentials,
        role_arn,
        extra_args=extra_args
    )

    assumed_role_credentials = DeferredRefreshableCredentials(
        credential_fetcher.fetch_credentials,
        "assume-role"
    )

    assumed_role_botocore_session = botocore.session.get_session()
    assumed_role_botocore_session._credentials = assumed_role_credentials

    # note that if this session's region changes, it will not cascade
    region_name = self.boto_ses.region_name

    return BotoSesManager(
        botocore_session=assumed_role_botocore_session,
        region_name=region_name
    )