granted icon indicating copy to clipboard operation
granted copied to clipboard

aws cli unable to use credentials produced by --export

Open dcarbone opened this issue 2 years ago • 0 comments

Using granted 0.2.5 on Monterey, the --export option does indeed define a profile secrets entry into the $HOME/.aws/credentials file, however the config is not usable as-written.

As @chrnorm correctly pointed out in slack, ~one must add -exported to the end of~ altering name of the profile entry in the $HOME/.aws/credentials in any way and using that updated profile name seems to solve it.

As an example:

https://user-images.githubusercontent.com/1392439/182409765-7c8ab141-5748-4c94-88ab-bcd016268062.mov

The video demonstrates the observed behavior. ~I'm honestly unsure what is causing this, I stepped through the auth chain locally and could not find an instance of the profile name being mutated in some way.~ Again thanks to @chrnorm for pointing out that this appears to be a conflict with the same profile name in other files in the $HOME/.aws directory, perhaps with configurations being merged in an undesirable order, by the aws cli tool.

dcarbone avatar Aug 02 '22 15:08 dcarbone