tustvold commented on PR #2891: URL: https://github.com/apache/arrow-rs/pull/2891#issuecomment-1282835477
> With sso profiles there are no credentials stored in plain text files though It's been a while since I used it, but if memory serves it caches both the final credentials, and the returned SAML assertion. The former typically has a TTL of 1 hour, and the latter 24 hours. Certainly better than non-ephemeral credentials, but still not great :sweat_smile: > Having to type aws-vault exec --profile xxx application FWIW you can type `aws-vault exec --profile xxx` to get a shell with credentials, a bit like pyenv -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
