https://pulumi.com logo
Title
b

brash-gigabyte-81569

04/18/2023, 3:23 PM
anyone have a work around for using assumeRoles with the yaml runtime? For instance this config doesn’t work
config:
  aws:assumeRole:
    roleArn: xxx
  aws:region: us-east-1
m

millions-furniture-75402

04/18/2023, 4:23 PM
A wrapper script, I believe I provided one in the issue for this on GitHub
b

brash-gigabyte-81569

04/18/2023, 4:24 PM
Not sure which issue.. Not this one though https://github.com/pulumi/pulumi-yaml/issues/434
m

millions-furniture-75402

04/18/2023, 4:26 PM
oh, sorry didn't realize this was regarding the YAML (now I see what channel I'm in...).
I don't know if you're trying to solve a similar problem or not, but this is an example of a wrapper script that gets the credentials from STS for that Role so that you don't need to configure it within the AWS provider. https://github.com/pulumi/pulumi-aws/issues/1366
b

brash-gigabyte-81569

04/18/2023, 4:31 PM
Definitely a similar issue. I don’t have the MFA issue so going to give profiles a shot but if I run into issues I’ll probably go back to wrapping. Thanks
m

millions-furniture-75402

04/18/2023, 4:33 PM
Funny enough, we don't have to deal with the MFA issue since moving to SSO.