GovCloud Base Account Filtering Fails in (maybe just Firefox, maybe not)

[rpattcorner]

Conditions

Only in Firefox (73.0.1 (64-bit)) Only with Govcloud (commercial accounts work OK)

Steps to reproduce:

1. Configuration like the test configuration below. Results same whether using alias or account number
2. Commercial account behaves as expected, commercial entries appear when logged into commercial base account and govcloud entries do not
3. Govcloud entries fail to appear in dropdown when logged into govcloud base account. Instead no entries are shown
4. Remove the source_profile in govcloud test entry and the govcloud test entry will appear

Place identical configuration in Chrome (80.0.3987.122 (Official Build) (64-bit) and govcloud behaviour is correct, govcloud behaving same as commercial

Test Configuration

1. Checkboxes checked for

• Hide original role history
• Hide account id

2. Test configuration below, replacing account numbers and aliases with real ones:

[govcloud-base-account] aws_account_id = govcloud-sample-alias

[sample entry govcloud] aws_account_id = 111111111111 role_name = TEST-IDENTITY-RO color = 425b96 region = us-gov-east-1 source_profile = govcloud-base-account

[commercial-base-account] aws_account_id = commercial-sample-alias

[sample entry commercial] aws_account_id = 222222222222 role_name = TEST-IDENTITY-RO color = 425b96 region = us-east-1 source_profile = commercial-base-account

[rpattcorner]

Seem to be unable to reproduce formerly successful govcloud filtering on Chrome either. If anyone has a filtered (source_profile=) govcloud setup that reliably works, could they possibly post a redacted sample?

[tilfin]

I'm sorry that I don't have the Gov AWS account, so it is difficult for me to investigate this problem 😢

[rpattcorner]

Yes, I should have thought about that. My apologies.

If it’s worth it to you, or the community, I’ll look into the problem from my end if you can describe how we would carry out debugging in either browser from the point that I press <F12> to activate the developer pane. I’ve copied one of our JavaScript developers. No doubt there’s a conditional we can set a breakpoint at and look at the underlying conditions – one might be failing.

It would also be helpful to be able to inspect where the extension saves the configuration.

From: Toshimitsu Takahashi [email protected] Sent: Wednesday, March 18, 2020 9:09 AM To: tilfin/aws-extend-switch-roles [email protected] Cc: PattCorner, Robert [email protected]; Author [email protected] Subject: Re: [tilfin/aws-extend-switch-roles] GovCloud Base Account Filtering Fails in (maybe just Firefox, maybe not) (#130)

I'm sorry that I don't have the Gov AWS account, so it is difficult for me to investigate this problem 😢

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/tilfin/aws-extend-switch-roles/issues/130#issuecomment-600612728, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AALLNBRKDTDPYTGMKCT3ORTRIDBX7ANCNFSM4LDBDOPQ.