Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Kapil Thangavelu
On Fri, Mar 4, 2016 at 8:25 PM, Kapil Thangavelu wrote: > > > On Fri, Mar 4, 2016 at 7:27 PM, Mark Shuttleworth wrote: > >> On 04/03/16 12:17, Kapil Thangavelu wrote: >> > They can be refreshed prior to expiration to get equivalent immortality, >> > example using pysdk >> > https://gist.github.c

Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Kapil Thangavelu
On Fri, Mar 4, 2016 at 7:27 PM, Mark Shuttleworth wrote: > On 04/03/16 12:17, Kapil Thangavelu wrote: > > They can be refreshed prior to expiration to get equivalent immortality, > > example using pysdk > > https://gist.github.com/kapilt/ac8e222081f63ba64e93 > > > > Ideal usage is actually using

Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Mark Shuttleworth
On 04/03/16 12:17, Kapil Thangavelu wrote: > They can be refreshed prior to expiration to get equivalent immortality, > example using pysdk > https://gist.github.com/kapilt/ac8e222081f63ba64e93 > > Ideal usage is actually using Iam instance roles as well for instance > credentials which basically w

Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Kapil Thangavelu
They can be refreshed prior to expiration to get equivalent immortality, example using pysdk https://gist.github.com/kapilt/ac8e222081f63ba64e93 Ideal usage is actually using Iam instance roles as well for instance credentials which basically work the same way wrt to refresh intervals. As perm cre

Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Paul Eipper
Mark, I think it would work well, from a user perspective, to have all this config be in the enviroments.yaml file with the same setup as the aws cli config. Something like this: ``` environments: amazon-cross-account: type: ec2 region: sa-east-1 access-key: AWSKEY

Re: Fwd: AWS Cross Account Roles

2016-03-04 Thread Mark Shuttleworth
Paul, it would be interesting to see a proposal on how you'd like it to work. Mark On 03/03/16 21:36, John Meinel wrote: > At the moment I don't believe we do. We just use your access key and secret > key to identify you to EC2 when we make requests. We don't support using > temporary credential

Re: Fwd: AWS Cross Account Roles

2016-03-03 Thread John Meinel
At the moment I don't believe we do. We just use your access key and secret key to identify you to EC2 when we make requests. We don't support using temporary credentials via Assume role For those of us wanting to know more here is AWS page http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_c

Fwd: AWS Cross Account Roles

2016-03-03 Thread Paul Eipper
Hello, Does Juju work with AWS Cross Account Roles? Specifically, IAM users that need to set the "External ID" string to assume the role? AWS Cli support is enabled by configuring a profile: https://docs.aws.amazon.com/cli/latest/userguide/cli-roles.html#cli-roles-xaccount and then specifying it