grzm/awyeah-api

unable to find credentials via credential_process

Opened this issue · 1 comments

I am using aws-vault and using credential_process to secure my credentials in the keychain.
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html

[profile fluree-kharriger-sandbox]
credential_process=aws-vault export fluree-kharriger-sandbox --no-session --format=json
region=us-east-1

typically exporting aws profile is sufficient.

export AWS_PROFILE=fluree-kharriger-sandbox
bb cidr.clj
2024-04-27T16:07:00.530Z Kurts-MacBook-Pro.local DEBUG [com.grzm.awyeah.credentials:174] - Unable to fetch credentials from environment variables.
2024-04-27T16:07:00.535Z Kurts-MacBook-Pro.local DEBUG [com.grzm.awyeah.credentials:174] - Unable to fetch credentials from system properties.
2024-04-27T16:07:05.540Z Kurts-MacBook-Pro.local DEBUG [com.grzm.awyeah.credentials:174] - Unable to fetch credentials from environment variables.
2024-04-27T16:07:05.540Z Kurts-MacBook-Pro.local DEBUG [com.grzm.awyeah.credentials:174] - Unable to fetch credentials from system properties.
nil

As a workaround I can export the credentials per invocation with aws-vault exec

 aws-vault exec fluree-kharriger-sandbox -- bb cidr.clj

Something to keep in mind to support in future.

I'm having the same problem with our saml2aws creds. setting AWS_PROFILE=mysamlprofile, etc doesn't work in the repl or at the cmdline