How does one decrypt the encryped password output of a

Question

How does one decrypt the encryped password output of a <https www pulumi com docs reference pkg aws iam userloginprofile password reset required python|UserLoginProfile> resource thinking face

broad-dog-22463 · Answer

Hi < agreeable ram 97887> what did you pass into it to create it PGP or keybase

broad-dog-22463 · Answer

you should be able to do something like ```pulumi stack output myPropertyName | base64 decode | keybase pgp decrypt```

agreeable-ram-97887 · Answer

At the moment keybase although Im not stuck on it For the moment I manually created an asymmetric key on AWS and just plugged it in to pulumi and it seemed to work shrug but tbh im a bit out of my depth

agreeable-ram-97887 · Answer

i ll try your suggestion and get back Thank you slightly smiling face

agreeable-ram-97887 · Answer

I guess I have to make an account with keybase This seems a bit weird since I made the asynmmetrric key on aws and I would assume that I should be able to access the functionality I need through the aws cli e g `aws kms decrypt `

agreeable-ram-97887 · Answer

but maybe Im missing something

agreeable-ram-97887 · Answer

or maybe to turn the question around All I am looking for is the ability to give certain users login access to the aws console by setting an initial password in my pulumi stack What would be the suggested way to do this

broad-dog-22463 · Answer

you don t need to use keybae

broad-dog-22463 · Answer

you can use a gpg key

broad-dog-22463 · Answer

but you need to provider one or the other

broad-dog-22463 · Answer

the resource under the hood uses it

agreeable-ram-97887 · Answer

I ve tried grabbing the public key from the AWS console and pasting it in pgp key see below but then I see errors such as `Error encrypting Password error parsing given PGP key openpgp invalid data tag byte does not have MSB set`

agreeable-ram-97887 · Answer

This is with both pasting the key directly as well as base64 encoding it first like the docs suggest `echo RAW KEY | base64`

agreeable-ram-97887 · Answer

but I guess I m still doing something wrong thinking face

agreeable-ram-97887 · Answer

btw I v assumed that I should use AWS KMS to generate an asymmetric key to do this encryption but tbh that was a total guess on my end shrug At the moment I ve done this manually but my ultimate goal is to have all components provisioned within the pulumi script Should I instead be using something else for example <https www pulumi com docs reference pkg aws ec2 keypair |ec2 KeyPair>

broad-dog-22463 · Answer

wait you are trying to create an SSH Key This resource is for a user s login to the AWS console

agreeable-ram-97887 · Answer

gt wait you are trying to create an SSH Key Not necessarily all I would like to do is create the LoginProfile resource and be able to pass the default password on to the user

broad-dog-22463 · Answer

ok so if you want to do that then the provider requires you to use a PGP Key to encrypt the password

agreeable-ram-97887 · Answer

which I can generate as an asymetric key using AWS KMS

agreeable-ram-97887 · Answer

Or do I need to use some other service to get a PGP key

broad-dog-22463 · Answer

I ve not tried it using an AWS KMS key tbh

agreeable-ram-97887 · Answer

I see confused Maybe you could suggest to me how you would do it Or maybe you know a good tutorial to go off of