our authentication to AWS is managed through AWS S...
# geodesic
a
our authentication to AWS is managed through AWS SSO. our credentials have three parts: •
aws_access_key_id
•
aws_secret_access_key
•
aws_session_token
all the auth examples i've seen for
geodesic
and
atmos
rely on
aws-vault
and (from what i can tell)
aws-vault
only supports authentication with
aws_access_key_id
and
aws_secret_access_key
. is it possible to use cloudposse's tools in this case?
m
@Jeremy G (Cloud Posse) can likely point you in the right direction when he’s got a minute.
j
Use AWS CLI v2 which has direct support for AWS SSO. Sign in from within Geodesic.
AWS CLI v2 is the default in Debian-based Geodesic starting with version 0.146.0
@Alan Cox Set up your
$HOME/.aws/config
file for AWS SSO as directed by AWS, then from inside Geodesic you can run
aws sso login
. Make sure you have
AWS_PROFILE
set first.
a
awesome. thanks!