3 ms·
I use aws-vault and the best feature (apart from storing in your keychain, etc), is the fact that you can execute commands with the tokens in a shell environmen
by atonse 5y ago
I use aws-vault and the best feature (apart from storing in your keychain, etc), is the fact that you can execute commands with the tokens in a shell environment it launches (aws-vault exec my-profile -- some-command-which-gets-the-aws-env-vars.sh) . That way we never even have to store the temporary credentials on the filesystem unencrypted.
- andreacavagna 5y agoWe are going to implement a custom credentials process for AWS too with the Leapp Daemon, it's in the roadmap of the project. Thanks for pointing it out. The main difference is that Leapp also disable the profiles whenever they are not needed, so attackers can't find even the credential process attached to a not in use profile. The main idea is to bring only the least credentials needed in order to make developers work. check specification for an in-depth explaination: https://github.com/Noovolari/leapp/wiki/specs https://github.com/Noovolari/leapp/wiki/specs