scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-11-01 19:17:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add support for cross account management of static roles in AWS Secrets (#29645)

Browse Source 
* aws-secrets/add-cross-acc-mgmt-static-roles

* refactor

* add function pointer for tests

* delete commented out code

* update

* update comment

* update func name

* add flag

* remove docs
This commit is contained in:
Milena Zlaticanin
2025-02-14 14:13:00 -07:00
committed by GitHub
parent 64e92ba9fd
commit 6e0c771e57
12 changed files with 177 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
builtin/logical/aws/client.go
View File

@@ -148,21 +148,33 @@ func (b *backend) getRootConfigs(ctx context.Context, s logical.Storage, clientT
return configs, nil
}
func (b *backend) nonCachedClientIAM(ctx context.Context, s logical.Storage, logger hclog.Logger) (*iam.IAM, error) {
awsConfig, err := b.getRootConfigs(ctx, s, "iam", logger)
if err != nil {
return nil, err
func (b *backend) nonCachedClientIAM(ctx context.Context, s logical.Storage, logger hclog.Logger, entry *staticRoleEntry) (*iam.IAM, error) {
var awsConfig *aws.Config
var err error
if entry != nil && entry.AssumeRoleARN != "" {
awsConfig, err = b.assumeRoleStatic(ctx, s, entry)
if err != nil {
return nil, fmt.Errorf("failed to assume role %q: %w", entry.AssumeRoleARN, err)
}
} else {
configs, err := b.getRootConfigs(ctx, s, "iam", logger)
if err != nil {
return nil, err
}
if len(configs) != 1 {
return nil, errors.New("could not obtain aws config")
}
awsConfig = configs[0]
}
if len(awsConfig) != 1 {
return nil, errors.New("could not obtain aws config")
}
sess, err := session.NewSession(awsConfig[0])
sess, err := session.NewSession(awsConfig)
if err != nil {
return nil, err
}
client := iam.New(sess)
if client == nil {
return nil, fmt.Errorf("could not obtain iam client")
return nil, fmt.Errorf("could not obtain IAM client")
}
return client, nil
}