3 ms·
YubiKeys and aws-vault for managing my credentials. Hashicorp Vault and SSM for services.
by j13n 4y ago
YubiKeys and aws-vault for managing my credentials. Hashicorp Vault and SSM for services.
- jason_wo 4y agoNice! Do I understand this correctly? You use aws-vault(https://github.com/99designs/aws-vault https://github.com/99designs/aws-vault) and configure it with IAM and MFA with YubiKeys. You configure e.g. the profile jonsmith. When you run aws-vault exec jonsmith -- aws s3 ls it will ask you, e.g. every hour to confirm with YubiKeys and cache the key for one hour. After that the temporary keys expire. Can you also store keys different from AWS?