Implements a keychain backed cache for session credentials when using credential_process to invoke granted so GetRoleCredentials is not invoked every time. More details in issue #395.
Type of change
[ ] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update
Issue and Documentation
395
Testing
Please describe how the reviewer can test the changes. Also include steps to reproduce the testing environment.
Describe your changes
Implements a keychain backed cache for session credentials when using
credential_process
to invoke granted soGetRoleCredentials
is not invoked every time. More details in issue #395.Type of change
Issue and Documentation
395
Testing
Please describe how the reviewer can test the changes. Also include steps to reproduce the testing environment.
~/.aws/config
granted credential-process --profile demo | jq -r .Expiration
--window 24h
which demonstrates that the cache will be replaced when expiration - window is reached.Checklist before requesting a review