Channels
announcements
automation-api
aws
azure
blog-posts
built-with-pulumi
cloudengineering
cloudengineering-support
content-share
contribex
contribute
docs
dotnet
finops
general
getting-started
gitlab
golang
google-cloud
hackathon-03-19-2020
hacktoberfest
install
java
jobs
kubernetes
learn-pulumi-events
linen
localstack
multi-language-hackathon
office-hours
oracle-cloud-infrastructure
package-authoring
pulumi-ai
pulumi-cdk
pulumi-cloud
pulumi-crosscode
pulumi-deployments
pulumi-kubernetes-operator
pulumiverse
python
registry
status
testingtesting123
testingtesting321
typescript
welcome
workshops
yaml
Title
b
brash-gigabyte-81569
04/18/2023, 3:23 PManyone have a work around for using assumeRoles with the yaml runtime? For instance this config doesn’t work
config:
aws:assumeRole:
roleArn: xxx
aws:region: us-east-1m
millions-furniture-75402
04/18/2023, 4:23 PMA wrapper script, I believe I provided one in the issue for this on GitHub
b
brash-gigabyte-81569
04/18/2023, 4:24 PMNot sure which issue.. Not this one though https://github.com/pulumi/pulumi-yaml/issues/434
m
millions-furniture-75402
04/18/2023, 4:26 PMoh, sorry didn't realize this was regarding the YAML (now I see what channel I'm in...).
I don't know if you're trying to solve a similar problem or not, but this is an example of a wrapper script that gets the credentials from STS for that Role so that you don't need to configure it within the AWS provider.
https://github.com/pulumi/pulumi-aws/issues/1366
b
brash-gigabyte-81569
04/18/2023, 4:31 PMDefinitely a similar issue. I don’t have the MFA issue so going to give profiles a shot but if I run into issues I’ll probably go back to wrapping. Thanks
m
millions-furniture-75402
04/18/2023, 4:33 PMFunny enough, we don't have to deal with the MFA issue since moving to SSO.