aws-mfa-secure 0.3.5 → 0.3.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 94dd717cafaeea6c1d41e0e1ec7693af40f86f0f30f22aec621098d9fb1aa2ee
-  data.tar.gz: 639c9af3947210e4d6ffe7b5c45ddb6d957da1bed71595291f66d16c27b4f545
+  metadata.gz: 7a728b3bca2a3ecf8c4566c122eeb29e98e8f2e54ce6bd515c601a0cd070933a
+  data.tar.gz: '00894d69954b1abba894fe5cbfbd71c360d33f87a3805413379634724e3da3cd'
 SHA512:
-  metadata.gz: 9a35892f4b00e7b200beb44380ff4130bdba9d6777c7d06a5634bc2209c69ca8c418b8c74a42060aa8c47a5347ef493bd76ddd6512073cf5d64a87740a139cd4
-  data.tar.gz: ec4e8369e2ace95feee53b7c1393cba411c6ca566f35db38aafbb06d30ca729002cbe37413c353ce3ba0e09a147abea24b9ddca425a84ece43da466827e860cc
+  metadata.gz: bfee9f00cb2b17c5123d6c57eaf5b078fff8b579b137900f27e9d8457bb22a8a737bbf2e597bbcefb845b986994f5678c2836ca3137c7fa11b82323feb9e9309
+  data.tar.gz: aa7ce5e4a34d622f877f16dba24687dc1d883c5b4f22db715528334df55e76fbb2dd1e0c82677ecbff98c72077097cd98a91555caac4f02ff2d4feef330516d1

data/CHANGELOG.md

@@ -3,6 +3,9 @@
 All notable changes to this project will be documented in this file.
 This project *tries* to adhere to [Semantic Versioning](http://semver.org/), even before v1.0.
 
+## [0.3.6]
+- #1 speed up iam_mfa? detection with AWSConfig parser
+
 ## [0.3.5]
 - prompt for mfa when using AWS_* env and `AWS_MFA_SERIAL`
 

data/README.md

@@ -1,5 +1,7 @@
 # AWS MFA Secure
 
+[![Watch the video](https://img.boltops.com/boltopspro/youtube/aws-mfa.png)](https://www.youtube.com/watch?v=cYqKeMUS9pc)
+
 [![Gem Version](https://badge.fury.io/rb/aws-mfa-secure.png)](http://badge.fury.io/rb/aws-mfa-secure)
 
 Surprisingly, the [aws cli](https://docs.aws.amazon.com/cli/latest/reference/) does not yet support MFA for normal IAM users. See: [boto/botocore/pull/1399](https://github.com/boto/botocore/pull/1399)  The aws-mfa-secure tool decorates the AWS CLI or API to handle MFA authentication.  The MFA prompt only activates if `mfa_serial` is configured.
@@ -11,7 +13,7 @@ Surprisingly, the [aws cli](https://docs.aws.amazon.com/cli/latest/reference/) d
 Prerequisite: The [AWS CLI](https://docs.aws.amazon.com/cli/latest/reference/) is required. You can install the AWS CLI via pip.
 
     pip install awscli --upgrade --user
-
+    
 ## Usage
 
 **Summary**:
@@ -113,6 +115,13 @@ You can also set the MFA info with env variables. They take the highest preceden
 
 Docs: [How It Works](docs/how-it-works.md)
 
+## Linux Support
+
+This tool only supports Linux. For Windows, you'll have to set the `AWS_*` env variables manually. Refer to these resources:
+
+* [Switching to an IAM Role (Tools for Windows PowerShell)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-twp.html)
+* [How do I use an MFA token to authenticate access to my AWS resources through the AWS CLI?](https://aws.amazon.com/premiumsupport/knowledge-center/authenticate-mfa-cli/)
+
 ## Related
 
 You may also be interested in [tongueroo/aws-rotate](https://github.com/tongueroo/aws-rotate). It's an easy way to rotate all your AWS keys in your `~/.aws/credentials`.

data/aws-mfa-secure.gemspec

@@ -20,6 +20,7 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency "activesupport"
   spec.add_dependency "aws-sdk-core"
+  spec.add_dependency "aws_config"
   spec.add_dependency "memoist"
   spec.add_dependency "rainbow"
   spec.add_dependency "thor"

data/lib/aws_mfa_secure/base.rb

@@ -1,4 +1,5 @@
 require "aws-sdk-core"
+require "aws_config"
 require "json"
 require "memoist"
 require "time"
@@ -17,9 +18,9 @@ module AwsMfaSecure
       # The iam_mfa? check will only return true for the case when mfa_serial is set and access keys are used.
       # This is because for assume role cases, the current aws cli tool supports mfa_serial already.
       # Sending session AWS based access keys intefere with the current aws cli assume role mfa_serial support
-      aws_access_key_id = aws_configure_get(:aws_access_key_id)
-      aws_secret_access_key = aws_configure_get(:aws_secret_access_key)
-      source_profile = aws_configure_get(:source_profile)
+      aws_access_key_id = aws_config(:aws_access_key_id)
+      aws_secret_access_key = aws_config(:aws_secret_access_key)
+      source_profile = aws_config(:source_profile)
 
       aws_access_key_id && aws_secret_access_key && !source_profile
     end
@@ -117,7 +118,7 @@ module AwsMfaSecure
     end
 
     def mfa_serial
-      ENV['AWS_MFA_SERIAL'] || aws_configure_get(:mfa_serial)
+      ENV['AWS_MFA_SERIAL'] || aws_config(:mfa_serial)
     end
 
     def sts
@@ -125,13 +126,11 @@ module AwsMfaSecure
     end
     memoize :sts
 
-    # Note the strip
-    # Each aws configure get call has about a 300-400ms overhead so we memoize it.
-    def aws_configure_get(prop)
-      v = `aws configure get #{prop}`.strip
-      v unless v.empty?
+    def aws_config(prop)
+      v = AWSConfig[aws_profile][prop.to_s]
+      v unless v.blank?
     end
-    memoize :aws_configure_get
+    memoize :aws_config
 
     def aws_profile
       ENV['AWS_PROFILE'] || 'default'

data/lib/aws_mfa_secure/version.rb

@@ -1,3 +1,3 @@
 module AwsMfaSecure
-  VERSION = "0.3.5"
+  VERSION = "0.3.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-mfa-secure
 version: !ruby/object:Gem::Version
-  version: 0.3.5
+  version: 0.3.6
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-11-10 00:00:00.000000000 Z
+date: 2019-11-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -38,6 +38,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: aws_config
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: memoist
   requirement: !ruby/object:Gem::Requirement