What's Changed
- Simplify creation of temporary creds by @mtibben in #1120
- Handle
[sso-session]
section by @dima-vm in #1088 - Update Documentation to reflect new Multi-MFA per IAM User functionality on AWS. by @LouisTsiattalou in
#1101 - Add support for
credential_process
by @jmczerk in #1087
#1122 - Add
mfa_process
config by @mtibben in #1123 - Support aws-cli's
AWS_CREDENTIAL_EXPIRATION
by @mtibben in #1124 - Remove support for
parent_profile
, deprecated in v5 by @mtibben in #1131 - Add
aws-vault export
cmd by @mtibben in #1135 - Provide feedback to user to minimise confusion by @mtibben in #1136
- Make
--ecs-server
the default server implementation by @mtibben in #1137 - Automatically select the best prompt driver by @mtibben in #1138
- Remove use of old env vars by @mtibben in #1143
Backwards-compatibility breaks
--prompt=passotp
is no longer supported. Instead, usemfa_process = pass otp my_aws_mfa
in your config fileparent_profile
in the aws config file is no longer supported. Useinclude_profile
instead--server
now executes a ECS metadata server instead of a EC2 metadata server. To continue using the EC2 metadata server, use--ec2-server
instead- When using
aws-vault exec
the following old env vars are no longer set. If you use any of these env vars, use the more standard alternativeAWS_DEFAULT_REGION
(useAWS_REGION
instead)AWS_SECURITY_TOKEN
(useAWS_SESSION_TOKEN
instead)AWS_SESSION_EXPIRATION
(useAWS_CREDENTIAL_EXPIRATION
instead)
aws-vault exec --json
flag is deprecated and will be removed in a future release. Useaws-vault export --format=json
instead.
New Contributors
- @dima-vm made their first contribution in #1088
- @LouisTsiattalou made their first contribution in #1101
- @jmczerk made their first contribution in #1087
Full Changelog: v6.6.2...v7.0.0-beta1