Switch to using `aws configure sso` to provide CLI access to our AWS accounts in the 2i2c org

2i2c-org / infrastructure

Infrastructure for configuring and deploying our community JupyterHubs.

https://infrastructure.2i2c.org

BSD 3-Clause "New" or "Revised" License

103 stars 62 forks source link

Switch to using `aws configure sso` to provide CLI access to our AWS accounts in the 2i2c org #3860

Open yuvipanda opened 5 months ago

yuvipanda commented 5 months ago

Context

Our docs currently suggest you copy paste the access tokens from AWS into your terminal for credentials. This is not the most secure thing to do. aws configure sso now exists, and is much more secure.

Proposal

No response

Updates and actions

No response

consideRatio commented 5 months ago

This is also represented by #3441 with a more obfuscated topic title

If we have IAM identity center enabled, we can instead acquire temporary credentials with aws configure sso after logging in via a browser popup.