These are chat archives for aws/aws-cli

Apr 2017
Denis Loginov
Apr 24 2017 21:55
Hi all, does CLI support custom credential providers? I'd like to generate STS AssumeRole credentials with a passed policy on my backend, and return these to the client via a call to APIG. The problem comes when I use these to upload large files to S3 - if the creds expire, multipart uploads would fail unless credentials are transparently refreshed. But I cannot use AssumeRole directly because each client's permissions are further restricted by a passed policy. Other SDKs allow specifying a custom Credentials provider that can then call up my APIG endpoint. Is there currently something similar for CLI? Thanks