suggestion for profile setting about awssume

[reppard]

@SydOps There would be a little bit of work to support this enhancement request. I think the most simplistic approach would be to add support for AWS_DEFAULT_PROFILE.

Would something like this work for your use case?

AWS_DEFAULT_PROFILE=stage awssume <terraform command>

[ozbillwang]

@reppard

That's better. Accept system environments and feed with options in command.

[ozbillwang]

One more feature is, even run in default account (the source profile), we should support STS to generate temp token (that mean we don't use the default api account directly) , then we have same setting across all platforms/accounts.

In boto/python, it is call get_session_token,

http://boto.cloudhackers.com/en/latest/ref/sts.html#boto.sts.STSConnection.get_session_token

Different with assume role (http://boto.cloudhackers.com/en/latest/ref/sts.html#boto.sts.STSConnection.assume_role)

[reppard]

@SydOps I apologies for the lack of movement or feedback on this issue. After some thinking I don't feel this gem should cover this specific use case. This gem was written so that EC2 instances with Instance Profiles could assume a role and use the resulting credentials to do some work. In our case Instance Profiles are preferred over having shared profile/credential files on the EC2 instance. I'm going to close this issue but please feel free to open other issues or pull requests in the future. Thank you for your contributions to this thread!