Picking up credentials

[mchristie]

I had a couple of issues with bref picking up credentials.

At first it appeared to not be picking up the credentials file at all. I had several profiles setup but none were called [default]. Adding a [default] profile sorted this and I was able to pick other profiles, but it would be nice if this wasn't required.

We use AWS SSO to manage access to many sub accounts. I copied a key/secret/token from this and added it into the credentials file. Unfortunately this didn't work, I get the error The security token included in the request is invalid. Perhaps the dashboard isn't picking up the session token?

Being able to paste in these credentials would be really useful. Updating the credentials file is a bit of a waste as they're short lived anyway.

[mnapoli]

Hi! Sorry for the delay, I didn't configure my notifications 😅 .

OK, so far the Bref Dashboard uses the AWS JS SDK, which supports basic authentication methods from the credential files.

I'm adding both cases to my TODO list.

Being able to paste in these credentials would be really useful.

Just to be sure I understand, do you mean launching the app, and then it asks for you to copy/paste credentials manually?

It's definitely doable, but I always thought that this would be a lot of hassle every time you open up the app. What do you think?

[mnapoli]

I get the error The security token included in the request is invalid. Perhaps the dashboard isn't picking up the session token?

@mchristie That was indeed the case! I have just pushed an update, the Dashboard should now take the session token into account. It still requires to paste it in ~/.aws/credentials, but that's a first step.

The AWS SDK JS v3 now supports SSO it seems (since a few days), I need to wrap my head around SSO in AWS, do some tests and make it work. In the meantime let me know if you can make it work with the session token.

Thanks for your time!

[vhenzl]

I was trying out the dashboard and I ran into the same problem. I don't have the default profile either.

I have solved it for now by adding [default] section with random values. Dashboard complains that "The security token included in the request is invalid" after opening but works fine otherwise.

Once in, there is this profile selector that allows switching between all AWS profiles. It would be great to display this selection straight away if ~/.aws/credentials exists but there isn't [default] profile in it. What do you think?

[mnapoli]

Hi @vhenzl, thanks for sharing the workaround. That's definitely not ideal, but yeah it seems like theoretically it could work by picking the first profile available 🤔

I'll take note of that, thanks!