Is it possible to set AWS Profile somewhere in the...
# sstö
Ömer Toraman
10/21/2021, 10:22 PMIs it possible to set AWS Profile somewhere in the project? There would be better for people using multiple profiles.
a
Adrián Mouly
10/21/2021, 10:32 PMNo, you can just set env-var.
Adrián Mouly
10/21/2021, 10:32 PM“build”: “AWS_PROFILE=yabbleDevelopment sst build --verbose”,
s
Seth Geoghegan
10/21/2021, 10:48 PMI would love this feature
ö
Ömer Toraman
10/21/2021, 11:18 PMPeople seem to recommend giving up profiles altogether, but they are easy to use.
Right now I either pass in the CLI, or just set it as an environment variable in the terminal session.
but I guess it would be better to do that in a script in
package.json.envf
Frank
10/22/2021, 6:07 PM
Thanks @Adrián Mouly!
Frank
10/22/2021, 6:08 PM
@Seth Geoghegan @Ömer Toraman Just curious, do you find yourself needing to set AWS Profile when running
sst startFrank
10/22/2021, 6:09 PM
I ask b/c when you deploy, AWS credentials are all saved in the CI service and profiles aren’t used.
s
Seth Geoghegan
10/22/2021, 6:10 PMI use profiles to prevent myself from deploying to production 🙂
Seth Geoghegan
10/22/2021, 6:11 PMmy organization recently rolled out SSO, so I've started using
aws sso loginSeth Geoghegan
10/22/2021, 6:12 PMwhich supports using named profiles
Seth Geoghegan
10/22/2021, 6:13 PMbut to be honest, I'm still wrapping my head around how to best use AWS profiles effectively in my development process
a
Adrián Mouly
10/22/2021, 6:16 PM@Seth Geoghegan how is that sso stuff working?
Adrián Mouly
10/22/2021, 6:16 PMI also have SSO.
Adrián Mouly
10/22/2021, 6:16 PMBut I’m using profiles like I’ve sent above.
Adrián Mouly
10/22/2021, 6:16 PMJust configuring the profile in
.aws/credentialss
Seth Geoghegan
10/22/2021, 6:17 PMYeah, Ben Kehoe wrote an interesting article proposing an alternative approach to putting temporary credentials into ~/.aws/credentials, but I am still having to do so when running SST for some reason
a
Adrián Mouly
10/22/2021, 6:18 PMI seee.
Adrián Mouly
10/22/2021, 6:18 PMYeah maybe there is a gap there then.
s
Seth Geoghegan
10/22/2021, 6:18 PMeven though I do the same thing as you when calling SST
AWS_PROFILE=seth-staging sst startSeth Geoghegan
10/22/2021, 6:22 PMi set up
aws sso logina
Adrián Mouly
10/22/2021, 6:23 PMYeah would like to know more.
s
Seth Geoghegan
10/22/2021, 6:26 PMThis article does a good job of describing AWS SSO login: https://ben11kehoe.medium.com/you-only-need-to-call-aws-sso-login-once-for-all-your-profiles-41a334e1b37e
Seth Geoghegan
10/22/2021, 6:27 PMwhen you use it, it logs you in and stores cookies in your browser representing the logged in sessions. It also caches the token in
~/.aws/sso/cachea
Adrián Mouly
10/22/2021, 6:28 PMInteresting.
s
Seth Geoghegan
10/22/2021, 6:30 PMso, how I expect this to work
Seth Geoghegan
10/22/2021, 6:30 PMis that
aws sso loginSeth Geoghegan
10/22/2021, 6:31 PMwhen I later specify a profile (e.g. using an AWS SDK) it uses that cached token to retrieve the credentials for the account+role in the profile
Seth Geoghegan
10/22/2021, 6:34 PMbut, I haven't taken the time to digest all of this info, so I just keep stuffing rotating credentials in my ~/.aws/credentials 😆
ö
Ömer Toraman
10/22/2021, 11:53 PM@Frank I haven’t used or set CI yet 😞 I usually set it as an environment variable in the terminal, like
export AWS_PROFILE=myOtherProfileÖmer Toraman
10/22/2021, 11:55 PM@Seth Geoghegan I think if u set it as the session variable it would be better so u wouldnt need to pass it as the env variable to the sst process every time u run it
Ömer Toraman
10/22/2021, 11:56 PMor i guess putting it as a script in package.json would work as well