Forum Discussion

happosade's avatar
happosade
New Contributor
2 months ago

AWS Shell plugin is not providing session token

Hello, I tried to set up AWS shell plugin in a way that it'll provide me short lived tokens. I need these for our internal tools that use AWS SDK and is able to work with these temporary credentials...
cli
macos
1P_Phil's avatar
1P_Phil
Icon for Moderator rankModerator
2 months ago

Hi happosade​ ,

Thanks for writing in, I'd like to point you over to the SDKs.  Now that they support local authentication, it may make more sense to update your scripts to work with the 1Password SDKs.

Learn more about local authentication with the 1Password SDKs : https://developer.1password.com/docs/sdks/desktop-app-integrations

Let me know if this works for your setup.

Regards,
Phil & Team.

  • happosade's avatar
    happosade
    New Contributor
    2 months ago

    Hi 1P_Phil​!

    So just to clarify, as the documentation says:

    1Password CLI will then set the AWS_SECRET_ACCESS_KEY, AWS_ACCESS_KEY_ID and AWS_SESSION_TOKEN provisional environment variables to specify the temporary multi-factor authentication session values.


    it's not really possible to get those, other than what have been put to 1Password? I'd still need to do the assumes and whatnots in my own code using AWS SDK, so the benefit from having just
    `op run --env-file=/path/to/config/for/my/app  -- /path/to/bin`
    in shell alias isn't really there? I tried quickly to snoop around the documentation to see AWS specific things in documentation, but wasn't really able to find anything comparable to `aws ... --profile aws-target-profile` to get the specific short lived tokens for it?

    Our tool is cli-based, and it understands the environment variables here, if that makes any difference.