fixed console command to work with roles

aaronrea · May 8, 2020 · 7e6eb39 · 7e6eb39
1 parent b724efd
commit 7e6eb39
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 14 deletions.
diff --git a/last_update.txt b/last_update.txt
@@ -1 +1 @@
-2020-05-07
+2020-05-08
diff --git a/pacu.py b/pacu.py
@@ -723,19 +723,29 @@ def print_web_console_url(self):
 
         sts = self.get_boto3_client('sts')
 
-        res = sts.get_federation_token(
-            Name=active_session.key_alias,
-            Policy=json.dumps({
-                'Version': '2012-10-17',
-                'Statement': [
-                    {
-                        'Effect': 'Allow',
-                        'Action': '*',
-                        'Resource': '*'
-                    }
-                ]
-            })
-        )
+        if active_session.session_token:
+            # Roles cant use get_federation_token
+            res = {
+                'Credentials': {
+                    'AccessKeyId': active_session.access_key_id,
+                    'SecretAccessKey': active_session.secret_access_key,
+                    'SessionToken': active_session.session_token
+                }
+            }
+        else:
+            res = sts.get_federation_token(
+                Name=active_session.key_alias,
+                Policy=json.dumps({
+                    'Version': '2012-10-17',
+                    'Statement': [
+                        {
+                            'Effect': 'Allow',
+                            'Action': '*',
+                            'Resource': '*'
+                        }
+                    ]
+                })
+            )
 
         params = {
             'Action': 'getSigninToken',