granted
granted copied to clipboard
common-fate
The easiest way to access your cloud.
I'd like to use granted with IAM users, but I'm not comfortable with storing my access tokens in plain text on disk (`~/.aws/credentials`) per the recommendation here https://docs.commonfate.io/granted/getting-started#set-up-your-aws-profile-file. Would you...
Fixes #207 Added Granted config field which adds suffix to exported credentials. eg. Setting a suffix of `exported` When exporting the credentials for a role 'test-role' will save them under...
When running `assume my-profile` I get a success message ``` [cf-dev](ap-southeast-2) session credentials will expire 2022-08-04 11:50:47 +0800 AWST ``` However running `env | grep AWS` shows that no credentials...
Using granted 0.2.5 on Monterey, the `--export` option does indeed define a profile secrets entry into the `$HOME/.aws/credentials` file, however the config is not usable as-written. As @chrnorm correctly pointed...
`assume --sso --sso-start-url https://demo.awsapps.com/start --sso-region ap-southeast-2 --account-id 12345678912 --role-name MyRole` Enables sso config to be specified via flags. This feature is part of support for Granted Approvals
I've ended up with a fairly minimalistic pair of AWS cli config files with `.aws/config` only containing ``` [default] region = eu-west-2 ``` and `.aws/credentials` as follows ``` [default] aws_access_key_id...
When using azure to get credentials with GRanted, there is a check for expired credentials that appears to not work as expected. Expected behaviour is that if credentials are expired,...
Prior to commit https://github.com/common-fate/granted/commit/0b0be89dee39dcda17dcc4040297ae58b3366472, it was possible to declare a role_session_name from .aws/config, but now it is completely ignored. The main reason I'd like to use this is to have...
Hello, I've installed granted v0.2.2 and installed zsh autocompletion. Autocompletion is working with a plain `assume`. It would be awesome if it also worked with `assume -c`. Right now, it...
A nice feature to have is the ability to rotate temp session credentials automatically instead of manually triggering the assume command again.
