Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New lastpass export type for AWS IAM credentials #33

Merged
merged 3 commits into from
Nov 30, 2022
Merged

Conversation

austinweisgrau
Copy link
Contributor

IAM credentials can now be exported with keys AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY instead of username and password, which allows for a more seamless AWS credentialing flow with db-facts

IAM credentials can now be exported with keys AWS_ACCESS_KEY_ID and
AWS_SECRET_ACCESS_KEY instead of `username` and `password`, which
allows for a more seamless AWS credentialing flow with db-facts
@austinweisgrau
Copy link
Contributor Author

austinweisgrau commented Nov 28, 2022

Going to add these notes to a readme:

Needs to be added to the config (expected at /usr/local/etc/dbfacts.yml)

Under exports_from:

  lpass_aws_iam:
    pull_lastpass_aws_iam: "{{ lastpass_entry }}"

Then create new entries under dbs (or modify existing ones) using the lpass_aws_iam exports_from type. Example:

  aws_influencers_pipeline:
    exports_from: lpass_aws_iam
    lastpass_entry: 'AWS IAM (adhoc): influencers.pipeline'

Then you can run eval $(db-facts sh aws_influencers_pipeline) to credential your shell with AWS credentials from that lastpass entry.

@austinweisgrau
Copy link
Contributor Author

Resolves #34

Copy link

@mitchellj mitchellj left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good for a quick merge,

MITCH-TODO (Flagging for future look), Need to investigate in operator using a elif fallthrough tree for OoO concerns.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants