chanzuckerberg/aws-oidc

Ability to configure multiple roles per account

ryanking opened this issue · 0 comments

I would like to add a feature that would configure multiple roles per account, with one being default. The configure command would get a new flag, default-role-name. Profiles would be named accountname-rolename except for the one marked as default, which would be accountname.

For example, we these roles

  • acct-1: role-a, role-b
  • acct-2: role-a, role-b, rolec

And default role of role-a, you would get these profiles

  • acct-1 (maps to role-a)
  • acct-1-role-a
  • acct-1-role-b
  • acct-2 (maps to role-a)
  • acct-2-role-a
  • acct-2-role-b
  • acct-2-role-c

Doing this cleanly might require refactoring to separate out the completer and survey code a bit, but I think that might be valuable in and of itself.

What do you think @edulop91 and @kuannie1 ?