feat: support adding ec2-instance role provider

hashicorp / go-secure-stdlib

Mozilla Public License 2.0

64 stars 24 forks source link

Closed ddebko closed 1 year ago

ddebko commented 1 year ago

This PR enables the ability to add ec2-instance role providers to the credential chain for awsutil.

Added the following options to support ec2-instance role provider: WithRoleExternalId, WithRoleTags, WithWebIdentityTokenFile, WithRoleSessionName, WithRoleArn
GenerateCredentialChain() will append a ec2-instance role provider to the provider chain when roleARN is not empty and WebIdentityTokenFile is empty.

ddebko commented 1 year ago

I can't test that this is correct or not but no issues that I know of/can see.

I tested the code using our aws account. I ran the code using aws credentials on my laptop and on a ec2 instance.