Forum Discussion

Former Member's avatar
Former Member
3 years ago

AWS cli plugin is not supporting external otp anymore

Hello! before the last release of the 1password cli using an external OTP device (a yubikey) was possible for aws accounts with a mfa serial it's not the case anymore since this commit https://gi...
CLI
Former Member's avatar
Former Member
3 years ago

Hi! like this in .aws/config

[profile iam_main]
credential_process = sh -c 'echo "{\n \"Version\": 1,\n \"AccessKeyId\": \"$(op read "op://Personal/iam_main/access key id")\",\n \"SecretAccessKey\": \"$(op read "op://Personal/iam_main/secret access key")\"\n}" '
[profile production]
role_arn=arn:aws:iam::xxxxxxxxx:role/AdminRole
source_profile=iam_main
mfa_serial = arn:aws:iam::xxxxxxxxxxx:mfa/vincent