rundeck-plugins / rundeck-ec2-nodes-plugin

Get resource node data from Amazon EC2
86 stars 45 forks source link

Feature Request: Support passing AWS SessionToken for pre-assumed role #92

Open cydergoth opened 6 years ago

cydergoth commented 6 years ago

We have a use case where we need to pass a pre-assumed role to a this plugin as the role uses MFA.

These MFA roles are used during dev/testing and not in production where InstanceProfile roles are used.

At line https://github.com/rundeck-plugins/rundeck-ec2-nodes-plugin/blob/master/src/main/java/com/dtolabs/rundeck/plugin/resources/ec2/EC2ResourceModelSource.java#L179 only the secretAccessKey and accessKeyId are passed in, preventing us from passing the required sessionToken for the role.

We can't use the existing STS assume-role functionality built into the plugin because of the MFA requirement.

Please provide a a property to pass in this extra property.