grahamar / belem Goto Github PK

Thanks for sharing this solution. I have been experimenting with aws-credentials-broker and with a few modifications I was able to get this to work through belem.

As an proposed enhancement, AWS has the ability to to define profiles which invoke an external process to retrieve credentials as documented here.

It would be really great if support could be added for this workflow. Essentially you would invoke the CLI specifying the correct AWS_PROFILE and under the covers if there credentials are missing or expired, AWS will launch belem. Once the registered broker returns the credentials to belem, it seems that belem only then needs to print those credentials to stdout like so:

{
  "Version": 1,
  "AccessKeyId": "an AWS access key",
  "SecretAccessKey": "your AWS secret access key",
  "SessionToken": "the AWS session token for temporary credentials", 
  "Expiration": "ISO8601 timestamp when the credentials expire"
}  

I'm a novice go developer but I could possibly try experimenting and add support for another command.

Thanks

Doug