Commit Graph

23 Commits

Author SHA1 Message Date
peterwoodworth 65c2143642 chore: add final tests, add outputs to action.yml 2023-07-06 15:19:05 -07:00
peterwoodworth aa2675f083 implement last changes for vNext 2023-07-03 16:13:19 -07:00
peterwoodworth d26f2d03f8 feat: role-chaining 2023-06-21 16:45:34 -07:00
peterwoodworth 8aa25a5cb6 feat: optional policy inputs when assuming role 2023-06-21 14:50:04 -07:00
peterwoodworth 26227bfa7d chore: adjust cleanup build target 2023-03-22 16:52:04 -07:00
peterwoodworth 3088522ce8 chore: build and set cleanup file 2023-03-22 16:32:37 -07:00
peterwoodworth f6fdf0cdbd feat: aws region is optional, use global sts endpoint when not set 2023-03-15 14:12:01 -07:00
peterwoodworth f9f25e69f5 refactor, add new major version features and proxy 2023-03-10 14:35:59 -08:00
Tom Keller 4d17522ddb chore: projen eject 2022-10-27 16:57:03 -07:00
Tom Keller 239add3ff1 feat!: Initial v2 commit
* Implemented editorconfig
* Switched to ESM
* Switched to a TypeScript workflow
* Switched to projen for project management
* Major code refactor
* TODO: need tests
2022-10-14 20:43:09 -07:00
Daniel Barnes eb745fe265 chore: update role duration description (#486)
* fix: role duration desc.

https://github.com/aws-actions/configure-aws-credentials/blob/67fbcbb121271f7775d2e7715933280b06314838/index.js#L10
https://github.com/aws-actions/configure-aws-credentials/blob/67fbcbb121271f7775d2e7715933280b06314838/index.js#L315

* bolding for better attention grabbing + session-token update

* spacing for attention

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2022-10-10 23:36:08 +00:00
Alex Blewitt 2f8dfd0ed4 feat: Allow audience to be explicitly specified
The default audience for the GitHub OIDC uses sts.amazonaws.com, but there are
situations when it would be desirable to allow different audience names to be
used instead. Allow this to be specified as an argument to the action.
2022-03-24 10:22:07 +00:00
Michael Nesta 8053174404 feat: Add the ability to use a web identity token file (#240)
* feat: Add the ability to use a web identity token file

* mark web identity token file as not required

* fix indentation

* better docs and added support for relative vs absolute paths

* bind sts context and adjust fs calls

* exclude tags if using web identity token file

* fix readme aand adjust tag removal logic

* undo re-ordering of lines

Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2021-08-03 20:35:25 +00:00
Clare Liguori d19cafcdd1 feat: Add post-job action cleanup of credentials and region env vars (#101) 2020-07-29 16:03:44 +00:00
KeifferCulbreth baf85d8be9 fix: Make tagging optional (#92)
* fix:making role session tagging optional

* test:improve test coverage

Add test to cover error thrown if access key exists and no secret key provided

* docs: Update README.md

Add details about skipping session tagging during role assumption

Co-authored-by: KeifferCulbreth <KeifferCulbreth@users.noreply.github.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2020-07-08 23:25:05 +00:00
Clare Liguori a20ed60252 feat: don't require access key credentials for self-hosted runners (#42) 2020-03-06 17:59:39 +00:00
Clare Liguori 1c435bbd5e feat: Add option to provide external ID (#32)
Fixes #28
2020-03-02 18:11:27 -08:00
Chuan-Yen Chiang 4d0082acf8 feat: Have an ability to configure session name (#29)
* 1. Add 'role-session-name' variable to action.yml
2. Configure roleSessionName with role-session-name from action or default value (GitHubActions)

* Add description on README.md

* update README.md

* update dist/index.js

* add test code

* update context based on comments
2020-03-01 11:47:10 -08:00
Matt Bullock 25960ab095 feat: add support for assuming a role (#17)
* first draft attempt at adding role assumption option

* refinements

* const not var

* clean up asserts

* set explicit sts endpoint and clarify required inputs error message

* streamline mocks

* add new inputs to Action definition

* ignore .idea directory

* add initial assume role test

* make tests fail usefully when not in GitHub Actions

* add logic to handle suppression of stack trace

* pull credentials exports out into function

* convert environment variable patching to use object for source and add needed members

* add test for STS call

* compartmentalization and use custom user agent in role assumption STS client

* change DO_NOT_SUPRESS_STACK_TRACE to SHOW_STACK_TRACE

* update role-to-assume input description
2020-01-22 11:04:03 -08:00
Clare Liguori aa26d1f826 Add branding 2019-11-07 21:36:30 -08:00
Clare Liguori da518c1c8a Add support for masking the AWS account ID from logs 2019-11-01 20:49:03 -07:00
Clare Liguori 3aa1c0e14d Various fixes
Remove file-based env vars
Add support for session credentials
Add account ID as an output
Remove testing actions workflow
2019-11-01 20:35:42 -07:00
Steve Winton bb4ecd82fd Add initial implementation 2019-11-01 10:32:13 -07:00