steampipe-plugin-aws icon indicating copy to clipboard operation
steampipe-plugin-aws copied to clipboard

Feature request: Add a login command to AWS connection

Open forty opened this issue 1 year ago • 1 comments

We use SAML to login to aws. We have a script to login to a given profile use as such:

iam-login <profile_name>

which handles doing the SSO SAML flow (we don't use AWS SSO) and generating the role credentials in .aws/credentials

In order not to have to login manually to each account beforehand, I would love to be able to do something like

connection "aws_account_1" {
  plugin = "aws"
  profile = "account_1"
  login_command = "aws-login account_1"
}

forty avatar Aug 19 '22 14:08 forty

@forty Thanks for raising this request!

I believe we have had some previous discussions in various issues and PRs in this repo, along with a few other plugin repos. What we ultimately created as a feature request (but have not yet progressed with) was https://github.com/turbot/steampipe/issues/1426, which describes the ability to add hooks, which could then be used to run commands or scripts.

Would the ability to add hooks help your use case?

cbruno10 avatar Aug 19 '22 14:08 cbruno10

@cbruno10 sorry I missed you answer earlier. Hooks seems perfect for this use case. Should I close this issue?

Thanks!

forty avatar Sep 16 '22 07:09 forty

Hey @forty , yes I think we can close this issue. This issue is now linked to the other one as well, so when we look at implementing the hook feature as part of https://github.com/turbot/steampipe/issues/1426, we'll be sure to reference this issue as well.

If you have any other requirements, suggestions, use cases, etc., please add them into https://github.com/turbot/steampipe/issues/1426 as well. Thanks!

cbruno10 avatar Sep 16 '22 13:09 cbruno10