Comments (7)
Seems you're right. aws-vault behaves as follows when running aws-vault login profile
- If
profile
specifies a role ARN to assume, assume it and use these credentials to generate the sign-in link - Otherwise, when
profile
contains the credentials of an IAM user, usests:GetFederationToken
I opened 99designs/aws-vault#861 to enquire
from hackingthe.cloud.
Hello! This has now been merged (not released yet)
Do you want to give it a try? It should work when you have the credentials in your environment, no matter whether you did aws-vault exec xx
or manually exported them before
from hackingthe.cloud.
cool! and released as https://github.com/99designs/aws-vault/releases/tag/v6.6.0
from hackingthe.cloud.
I checked on that, and although aws-vault works great for this purpose, I think Consoler is easier to work with for someone who never used aws-vault.
So it might make sense to call out aws-vault login
without necessarily removing Consoler
from hackingthe.cloud.
Do you have an example for how this would work? I'm not seeing in the docs how to specify a session token from the EC2 metadata service.
from hackingthe.cloud.
It worked great! Thank you for all your work on this. I can get a note on this added to the aws-consoler page.
from hackingthe.cloud.
This is taken care of by #133. Thanks again for the suggestion @christophetd !
from hackingthe.cloud.
Related Issues (20)
- Update: Whoami - Get Principal Name From Keys Example
- Check HOT 1
- Add real-world references to techniques
- YouTube videos not loading on mobile HOT 1
- Fix s3 account brute force link
- Review and consider adding content from CrowdStrike sts:GetFederationToken blog HOT 1
- S3 Ransomware Article HOT 4
- IAM Credentials Stored on EC2 Disk
- SCARLETEEL: Operation leveraging Terraform, Kubernetes, and AWS for data theft
- Unmasking GUI-Vil: Financially Motivated Cloud Threat Actor HOT 1
- Add nsec2023 AWS CTF HOT 1
- SCARLETEEL Round 2 HOT 3
- Review the Sysdig 2023 Cloud Threat Report
- Review: Abusing the SSM Agent as a Remote Access Trojan
- Review: When a Zero Day and Access Keys Collide in the Cloud: Responding to the SugarCRM Zero-Day Vulnerability
- Review: aws_url_signer
- Add iam:CreateUser to Persistence Methods
- Integrate: LUCR-3: SCATTERED SPIDER GETTING SAAS-Y IN THE CLOUD
- [Bug] SneakyEndpoints: STS not working HOT 2
- [SEO]: Google claims there are video indexing problems. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hackingthe.cloud.