Giters

99designs / aws-vault

A vault for securely storing and accessing AWS credentials in development environments

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support aws-cli's AWS_CREDENTIAL_EXPIRATION envar

jaklan opened this issue · comments

commented
  • I am using the latest release of AWS Vault

After merging and releasing aws/aws-cli#7398, the official envar supported by aws-cli is AWS_CREDENTIAL_EXPIRATION, so I believe it should replace AWS_CREDENTIALS_EXPIRATION.

❯ AWS_PROFILE=some-profile aws configure export-credentials --format env
export AWS_ACCESS_KEY_ID=[redacted]
export AWS_SECRET_ACCESS_KEY=[redacted]
export AWS_SESSION_TOKEN=[redacted]
export AWS_CREDENTIAL_EXPIRATION=2023-01-01T18:18:38+00:00
commented

Also important due to that:

when envars are set, aws configure export-credentials just utilise them. So AWS_CREDENTIAL_EXPIRATION variable has to be set by granted (or any other tool) and then aws configure export-credentials would work correctly

aws/aws-cli#7388 (comment)