Forum Discussion

Anonymous's avatar
Anonymous
3 years ago

AWS cli plugin is not supporting external otp anymore

Hello! before the last release of the 1password cli using an external OTP device (a yubikey) was possible for aws accounts with a mfa serial it's not the case anymore since this commit https://gi...
cli
Anonymous's avatar
Anonymous
3 years ago

Hi! like this in .aws/config

[profile iam_main]
credential_process = sh -c 'echo "{\n \"Version\": 1,\n \"AccessKeyId\": \"$(op read "op://Personal/iam_main/access key id")\",\n \"SecretAccessKey\": \"$(op read "op://Personal/iam_main/secret access key")\"\n}" '
[profile production]
role_arn=arn:aws:iam::xxxxxxxxx:role/AdminRole
source_profile=iam_main
mfa_serial = arn:aws:iam::xxxxxxxxxxx:mfa/vincent