aws-vault as a Replacement For aws-consoler about hackingthe.cloud HOT 7 CLOSED

Seems you're right. aws-vault behaves as follows when running aws-vault login profile

• If profile specifies a role ARN to assume, assume it and use these credentials to generate the sign-in link
• Otherwise, when profile contains the credentials of an IAM user, use sts:GetFederationToken

I opened 99designs/aws-vault#861 to enquire

from hackingthe.cloud.

Hello! This has now been merged (not released yet)

Do you want to give it a try? It should work when you have the credentials in your environment, no matter whether you did aws-vault exec xx or manually exported them before

from hackingthe.cloud.

cool! and released as https://github.com/99designs/aws-vault/releases/tag/v6.6.0

from hackingthe.cloud.

I checked on that, and although aws-vault works great for this purpose, I think Consoler is easier to work with for someone who never used aws-vault.

So it might make sense to call out aws-vault login without necessarily removing Consoler

from hackingthe.cloud.

Do you have an example for how this would work? I'm not seeing in the docs how to specify a session token from the EC2 metadata service.

from hackingthe.cloud.

It worked great! Thank you for all your work on this. I can get a note on this added to the aws-consoler page.

from hackingthe.cloud.

This is taken care of by #133. Thanks again for the suggestion @christophetd !

from hackingthe.cloud.