granted
granted copied to clipboard
aws cli unable to use credentials produced by --export
Using granted 0.2.5 on Monterey, the --export
option does indeed define a profile secrets entry into the $HOME/.aws/credentials
file, however the config is not usable as-written.
As @chrnorm correctly pointed out in slack, ~one must add -exported
to the end of~ altering name of the profile entry in the $HOME/.aws/credentials
in any way and using that updated profile name seems to solve it.
As an example:
https://user-images.githubusercontent.com/1392439/182409765-7c8ab141-5748-4c94-88ab-bcd016268062.mov
The video demonstrates the observed behavior. ~I'm honestly unsure what is causing this, I stepped through the auth chain locally and could not find an instance of the profile name being mutated in some way.~ Again thanks to @chrnorm for pointing out that this appears to be a conflict with the same profile
name in other files in the $HOME/.aws
directory, perhaps with configurations being merged in an undesirable order, by the aws cli tool.