Sorry to repeat the question, but can someone conf...
# general
r
Sorry to repeat the question, but can someone confirm whether
@pulumi/awsx
(CrossWalk) supports AWS SSO credentials? I know that
@pulumi/aws
does. (TypeScript FYI)
m
Are you sure
@pulumi/aws
works with SSO credentials?
Ahh yeah, you're right, it's MFA I was thinking about.
FWIW, I'm using crosswalk with sso
r
awsx:lb:ApplicationLoadBalancer
fails with SSO credential and works with classic CLI credentials.
aws:lb:LoadBalancer
works with either. This is a bug. Pulumi can you please reproduce/fix this. Is CrossWalk deprecated? I had thought it was new, but it seems very poorly maintained.
Appears that
aws-native
also does not work correctly with AWS SSO credentials. I really hate giving out classic CLI credentials, would be nice to have someone at Pulumi at least attempt a repro.
m
That's interesting, I might be inadvertently avoiding the bug with my declaration that explicitly declares in inner aws LB:
Copy code
const alb = new awsx.lb.ApplicationLoadBalancer(`${appName}-lb`, {
  loadBalancer: new aws.lb.LoadBalancer(`${appName}-alb`, {
    accessLogs: {
      bucket: logBucketId,
      enabled: true,
      prefix: appName,
    },
    dropInvalidHeaderFields: true,
    internal: true,
    securityGroups: [albSecurityGroup.id],
    subnets: privateSubnetIds,
    tags: autotag,
  }),
  vpc,
});
ping