common-fate/granted v0.20.0

on GitHub

--chain flag for Inline Role Assumption

You can now use the new --chain flag to assume another role inline. This feature can be utilized in conjunction with either the --exec option or as part of a regular profile definition.

assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example --exec -- aws sts get-caller-identity

or

assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example

DefaultExportAllEnvVar config

You can now include the DefaultExportAllEnvVar=true configuration in your ~/.granted/config file. This configuration will enable the automatic export of all environment variables by default when credential_process is used.

ExportCredsToAWS config

You can also include the ExportCredsToAWS=true configuration in your ~/.granted/config file. This will enable credentials to be exported to ~/.aws/credentials by default.

What's Changed

• fix: --unset flag not unsetting AWS_DEFAULT_REGION by @Eddie023 in #526
• add skip cred process string validation option by @JoshuaWilkes in #514
• Added ExportCredsToAWS config by @shwethaumashanker in #541
• Added DefaultExportAllEnvVar config by @shwethaumashanker in #540
• fix panic: runtime error by @shwethaumashanker in #537
• fix AWS SSO polling config by @chrnorm in #535
• add --chain flag to assume another role inline by @JoshuaWilkes in #527
• Use AWS SDK to load sso-session sections enable multiple sso users by @JoshuaWilkes in #530

Full Changelog: v0.19.2...v0.20.0