aws-toolkit-azure-devops icon indicating copy to clipboard operation
aws-toolkit-azure-devops copied to clipboard

Published 20 hours ago • verified publisher icon aws

Creation of AWSTemporaryCredentials to help with OIDC Federation via AssumeRoleWithWebIdentity

Open ROunofF opened this issue 2 months ago • 2 comments

Description

Create a new task AWSTemporaryCredentials that use the OIDC token to federate and get temporary AWS Credentials from STS service.

Motivation

This aligns with the security best practices of not storing static credential. Adding a task this way, allows it to be flexible and even reusable across non-aws tasks.

Related Issue(s), If Filed

#521 PR #550 is taking a different approach but would need all tasks to be modified

Testing

Checklist

  • [X] I have read the README document
  • [X] I have read the CONTRIBUTING document
  • [X] My code follows the code style of this project
  • [X] I have added tests to cover my changes
  • [X] A short description of the change has been added to the changelog using the script npm run newChange

License

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

ROunofF avatar May 07 '24 18:05 ROunofF