I m trying to set the `AWS CONFIG FILE` parameter when runni Serverless Stack #sst

I'm trying to set the `AWS_CONFIG_FILE` parameter ...

Seth Geoghegan

11/02/2021, 9:57 PM

I'm trying to set the

AWS_CONFIG_FILE

parameter when running

sst start

so I can specify a location of an alternative

~/.aws/config

file

Seth Geoghegan

11/02/2021, 9:58 PM

I tried to update my

package.json

as follows:

Copy code

"scripts": {
    "start": "AWS_CONFIG_FILE=/path/to/my/config AWS_PROFILE=staging AWS_SDK_LOAD_CONFIG=1 sst start --stage $(whoami)",
    "remove": "AWS_CONFIG_FILE=/path/to/my/config AWS_PROFILE=staging AWS_SDK_LOAD_CONFIG=1 sst remove --stage $(whoami)",
  }

Seth Geoghegan

11/02/2021, 10:00 PM

However, this does not work. The AWS docs says the following about

AWS_CONFIG_FILE

You can't specify this value in a named profile setting or by using a command line parameter

Seth Geoghegan

11/02/2021, 10:00 PM

I'm not clear about where I should define this environment variable?

Seth Geoghegan

11/02/2021, 10:01 PM

A little background, I'm planning on committing a shared config file to source control. In doing so, I can ensure anyone in the organization that runs

yarn run start

will deploy to the same account

Michael Clifford

11/02/2021, 10:14 PM

I think the

AWS_CONFIG_FILE

and

AWS_PROFILE

settings may be at odds with each other, with

AWS_PROFILE

taking precedence. In that shared config are you planning on having the

aws_access_key_id

and

aws_secret_access_key

stored? Because that is highly frowned upon, even in private repos.

Michael Clifford

11/02/2021, 10:14 PM

would be better to just define

AWS_PROFILE

as something and then have users set that up locally with their own IAM creds (via

aws configure --profile YOUR_PROFILE_NAME

)

Seth Geoghegan

11/02/2021, 10:18 PM

No sensitive data, just configuration for SSO (start url, region, account number) and each person deploying this app locally will have their own credentials file with their account secrets

Seth Geoghegan

11/02/2021, 10:20 PM

In setting this up, I'm hoping to prevent the user from needing to ensure they have a specific profile configured (even though their account will grant them access)

Michael Clifford

11/02/2021, 10:21 PM

ahh got it, SSO setup. Are you using

aws-sso-credentials

Michael Clifford

11/02/2021, 10:22 PM

Every time I've had to deal with this it sufficed to just have the relevant setup in the README. It's a one-time action

Seth Geoghegan

11/03/2021, 2:18 AM

Yeah, I think that's good advice

Seth Geoghegan

11/03/2021, 2:19 AM

I'm trying to make a lower friction development experience for members of this team

Seth Geoghegan

11/03/2021, 2:19 AM

but honestly, setting up your AWS CLI with SSO isn't really a lot of work

Open in Slack

Previous Next