Allow passing a roleArn and externalId when using ENV

cloudgraphdev · Sep 25, 2023 · fb838b2 · fb838b2
1 parent 38d8579
commit fb838b2
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/src/services/index.ts b/src/services/index.ts
@@ -430,6 +430,16 @@ export default class Provider extends CloudGraph.Client {
       }
       if (usingEnvCreds) {
         this.logger.success('Using credentials set by ENV variables')
+        if(role) {
+          this.logger.success(`roleARN: ${chalk.underline.green(
+            obfuscateSensitiveString(role)
+          )}`)
+        }
+        if(externalId) {
+          this.logger.success(`externalId: ${chalk.underline.green(
+            obfuscateSensitiveString(externalId)
+          )}`)
+        }
       } else {
         this.logger.success('Found and using the following AWS credentials')
         this.logger.success(
@@ -702,7 +712,7 @@ export default class Provider extends CloudGraph.Client {
     // If the user has passed aws creds as env variables, dont use profile list
     if (usingEnvCreds) {
       rawData = await this.getRawData(
-        { profile: 'default', roleArn: undefined, externalId: undefined },
+        { profile: 'default', roleArn: process.env.AWS_ROLE_ARN, externalId: process.env.AWS_ROLE_EXTERNAL_ID },
         opts
       )
     } else {