安全和IAM
Awsume 4发布
最方便的假定角色助手的更新:2020年4月更新
2017年7月14日,星期五
In case you’ve missed it, AWSume is a cross-platform AWS command-line tool that makes working with the AWS CLI under different profiles or roles super easy. You no longer have to manually set environment variables, or pass the --profile <profile_name>
to the end of your AWS CLI calls. When you have your profiles correctly set up, you can simply run awsume <profile_name>
, and AWSume will do the work for you!
AWSume通过设置您的AWS环境变量来工作。这样,您进行的任何其他AWS CLI调用都将在您AWSumed的配置文件下,直到配置文件凭证过期。
以前,我们必须为我们要支持的各种平台维护三个不同的代码库。更新和添加新功能花了很长时间。安装也涉及许多步骤。
We have moved the core of what AWSume is from the shell scripts into the Python script awsumepy
. But why?
awsume
shell wrappers for each platform we support. However, since the work has been taken from the shell and put on Python, maintaining these shell scripts is much easier.AWS role credentials are only valid for a maximum of an hour. This means that you need to call AWSume once for every hour that you work under that role. Now, we have developed an AWSume auto-refresher! By simply passing the -a
option to AWSume with the given role, you’ll spawn a background process that refreshes roles that are about to expire, for as long as the role’s source profile’s credentials are valid. Once there are no more roles to refresh, autoAWSume stops running.