Open a CLI and a console at the same time with a one liner
This release adds a new -t
flag to allow assuming a role in the terminal, and opening the web console at the same time:
assume -t -c
A huge thankyou to @n3s7or for contributing this feature!
Improvements to automatic profile generation
This release adds support for specifying sources to load AWS profiles from, using the --source
flag. Our default source is AWS IAM Identity Center --source aws-sso
, which sources profiles for all available SSO roles. This release adds support for using Common Fate as a source for roles: specifying --source cf
will source profiles for all available Access Rules. This can be useful for generating profiles for privileged roles which require an access request to be made.
We'd love to hear if you have suggestions for additional profile sources - please open an issue with any ideas.
Additionally, profiles generated now use the Granted Credential Process by default. You can opt out of this behaviour by specifying --no-credential-process
.
Finally, we've added support for a --prune
flag:
granted sso populate --sso-region ap-southeast-2 --prune https://example.awsapps.com/start
This flag will remove any profiles which were previously generated by Granted, but no longer exist in the source Granted is reading profiles from. Thanks to @denniswebb for requesting this feature in #340.
Service list improvements
This release adds appsync
to our service map, so running assume -s appsync
will no longer give a warning message. Thanks again @n3s7or!
What's Changed
- added appsync to services map fixes #342 by @n3s7or in #343
- copy any none profile section from config file in Profile Registry by @Eddie023 in #339
- use kebab-case for required-key argument by @chrnorm in #354
- adds command output hint by @JoshuaWilkes in #346
- add AWS_CREDENTIAL_EXPIRATION to scripts by @JoshuaWilkes in #345
- Use MkdirAll before Create to create all parent directory by @Eddie023 in #356
- added new flag -t to assume credentials in terminal along with web co… by @n3s7or in #347
- explicitly specify IFS when reading output by @chrnorm in #352
- add '--save-to' flag by @chrnorm in #358
- remove unused dependencies by @chrnorm in #361
- AWS profile generation improvements by @chrnorm in #359
Full Changelog: v0.7.1...v0.8.0