Feature request: expired token backoff/retry about dynamodump HOT 1 CLOSED

#!/bin/bash

# our tool uses the 'loginloop' profile as a temp placeholder. Note that 
# if this profile does not yet exist then the AWS CLI will print a message to STDERR,
# but credential_process only looks at STDOUT so no need to suppress the error
expiry_time=$(aws configure get expiry_time --profile loginloop)

# since our tool uses the shared credential file anyway, we use the loginloop profile
# as a credential cache so that we aren't requesting a new token on every invocation,
# only if the token is expired or not set. refresh the token 90 seconds before
# expiration to allow a buffer in case your toolset is slow
current_time_plus_90=$(date +%s --date="90 seconds")

if [ -z "$expiry_time" ] || [ $(date -d "$expiry_time" +%s) -le $current_time_plus_90 ]; then
    # redirecting STDOUT to /dev/null so only errors are printed
    customlogintool --profile loginloop --role role-to-assume > /dev/null
fi

# Get the credentials from the `~/.aws/credentials` file under the `loginloop` profile
aws_creds=$(aws configure get aws_access_key_id --profile loginloop)
aws_secret=$(aws configure get aws_secret_access_key --profile loginloop)
aws_session=$(aws configure get aws_session_token --profile loginloop)
aws_expiry=$(aws configure get expiry_time --profile loginloop)

# write the JSON output to STDOUT
cat <<EOF
{
  "Version": 1,
  "AccessKeyId": "${aws_creds}",
  "SecretAccessKey": "${aws_secret}",
  "SessionToken": "${aws_session}",
  "Expiration": "${aws_expiry}"
}
EOF