David D. Riddle

Results 20 comments of David D. Riddle

@edthedev #75 does _not_ address this issue. This still needs to be addressed, either by embedding the sha of the python binary in the cache key, or by an update...

The relevant Amazon account IDs and roles are returned by the IdP to the plugin via a [SAML Response](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html). Unfortunately, the IdP does not return each account IDs' alias. The...

@JonRoma this was something that Scrum Team D was interested in. I think they may have found another solution. Not sure. I would ping Maiko or John Gordman but I...

@kwessel from what I remember from three years ago is that we wanted the cookie generated by the login to the IdP but did not really need the credentials from...

`awscli-login` does know when the credential will expire. If it did not then I could not have implemented auto-refresh. AWS sends back an `Expiration` timestamp as can be seen in...

@JonRoma Yes, I was talking about the temporary AWS STS credentials. The cookies themselves have an expiration that is stored in plaintext in the cookie jar `~/.aws-login/cookies/your_netid.txt `, but looking...

The first thing I would like to try is sourcing credentials with an external process: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html. This would make a big change in how credentials are rotated so I would...

@zdc217 aws decided to stop supporting pip with V2 even though many customers loudly protested that decision. In theory because they may refactor the tool to use a different langauge....

@JonRoma any idea how the duplicate entries came about?

> I'm not sure if I like that you have to specify --verify-ssl-certificate=false on the command-line. It almost feels like it should be a switch: --skip-ssl-cert-verification which sets verify_ssl_certificate to...