aws_runas 0.3.1 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: f9e60ed4c0cf8087605426ff18b859a4effcb7d0
-  data.tar.gz: 23c46cc1407a5c521b8d7ac4a3130f85c3ef368e
+  metadata.gz: af8ca683b13de341202e80a4e5ba6db77eda5903
+  data.tar.gz: de6f9fcd9160ffb9ed9bc31ed895f43ef489ea7f
 SHA512:
-  metadata.gz: 2774fd7e5f13d104a7c2cf24bcd03f8402162e388a296dbfe75d1632e8a2c60477d106923a89a95ade20b8185fd324a40ef30de2a264ee3707620fd3818eb579
-  data.tar.gz: d283315d8d0025df28dc433b01fbd8a883f219c3dd1bb022e194f967ee4bf4d17a810bea6ec73e65aac40f5f497e5496fb7a67424452dfdcd99b953581a4cfdd
+  metadata.gz: ef6af6dd0f335c650c817b41d87f0d81f113a907d44cacf2cde7080bb5fcbdabf19b99a1a6a844ae0bff7f351d1849b805d6eeafa244c636c934cff4318712c3
+  data.tar.gz: d69007d2fedddfaae682f07cc565ad7bb9a226275ba2420a7b20db6662a2f45b684dee8d115b1c2d71ab2b0edfc36342079f0d08dce960636bef5425e0fd17d0

data/.gitignore

@@ -11,3 +11,5 @@
 # Adding bin and vendor as this should never be vendored in production
 /bin/
 /vendor/
+
+*.gem

data/.travis.yml

@@ -1,4 +1,5 @@
 langauge: ruby
 rvm:
-  - "2.2.3"
-  - "2.1.7"
+  - "2.4.0"
+  - "2.3.3"
+  - "2.2.6"

data/CHANGELOG.md

@@ -1,3 +1,14 @@
+## v0.4.0
+
+ * Dropping support for Ruby 2.1. You will need at least Ruby 2.2.6 to be using
+   this gem now. If you have a version below this, please use a v0.3.x version.
+ * MFA entry is no longer hidden from the terminal - you will see the digits you
+   enter now.
+ * Added a special indicator to `bash` prompts when running interactively. This
+   prompt displays your running profile, like so: `(AWS:default)`. When running
+   via --no-role, the indicator is just `(AWS)`. This should help to distinguish
+   any AWS shells you may be running from regular ones.
+
 ## v0.3.1
 
 This update sets `AWS_SDK_CONFIG_OPT_OUT` before the `aws-sdk` Ruby gem is

data/README.md

@@ -23,6 +23,11 @@ thing, but there are some differentiators in this gem:
    interactive shell sessions (by supplying no commands).
  * MFA will be auto-detected and only prompted for if necessary (allowing one
    to assume a role that does not have a MFA serial supplied).
+ * Session tokens can be acquired without assuming a role by adding the
+   appropriate `mfa_serial` into the `[default]` profile and running `aws-runas`
+   with `--no-role`. Subsequent uses of `aws-runas` after this will not prompt
+   you for MFA (useful for tooling that needs to assume multiple roles off the
+   same session token).
 
 Usage
 ------

data/aws_runas.gemspec

@@ -24,7 +24,7 @@ Gem::Specification.new do |spec|
   spec.description = 'Run a command or shell under an assumed AWS IAM role'
   spec.summary = spec.description
   spec.homepage = 'https://github.com/vancluever/aws-runas'
-  spec.license = 'Apache 2.0'
+  spec.license = 'Apache-2.0'
 
   spec.files = `git ls-files`.split($INPUT_RECORD_SEPARATOR)
   spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
@@ -35,7 +35,7 @@ Gem::Specification.new do |spec|
   spec.cert_chain  = ['certs/vancluever.pem']
   spec.signing_key = File.expand_path('~/.ssh/gem-private_key.pem') if $PROGRAM_NAME =~ /gem\z/
 
-  spec.required_ruby_version = ['>= 2.1']
+  spec.required_ruby_version = ['>= 2.2.6']
 
   spec.add_dependency 'aws-sdk', '~> 2.6'
   spec.add_dependency 'inifile', '~> 3.0'

data/certs/vancluever.pem

@@ -1,22 +1,22 @@
 -----BEGIN CERTIFICATE-----
 MIIDjjCCAnagAwIBAgIBATANBgkqhkiG9w0BAQUFADBGMQ8wDQYDVQQDDAZjaHJp
 c20xHjAcBgoJkiaJk/IsZAEZFg52YW5jbHVldmVydGVjaDETMBEGCgmSJomT8ixk
-ARkWA2NvbTAeFw0xNTExMjMyMzQ3NTdaFw0xNjExMjIyMzQ3NTdaMEYxDzANBgNV
+ARkWA2NvbTAeFw0xNzAzMTYxNjM0MTZaFw0xODAzMTYxNjM0MTZaMEYxDzANBgNV
 BAMMBmNocmlzbTEeMBwGCgmSJomT8ixkARkWDnZhbmNsdWV2ZXJ0ZWNoMRMwEQYK
 CZImiZPyLGQBGRYDY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
-uQTxFEI+Xzntwk3P+EAX4alaLkLAUA4x5jVbP4bEaOIfixQkur5js3XS5UfKlxEW
-Tf4pmiXqlrrLSm5o1EURpQao8DdWkMiAvfr/M8WHTzWng+YmpvctjcGFofq4w+Zk
-IJ0RsOEKFv7VOSn3qr1Aee9BVXSPb0+yCu6Kjt8u768M2wq8WNQW66XG2+tQW4UT
-khadeSU2srZfd7H7T3LSzjOtWedcy/foiJvULlWqFuBUv67Qp04GXHT4n5cukuIH
-eNQgqfa9CIyhzpyyS+mPY8D8ewjIWrptQbUiFeB2dE37xes+uaRMdwwhk2oU6jLV
-QMv1YG4V3JxFpTNPea5jfQIDAQABo4GGMIGDMAkGA1UdEwQCMAAwCwYDVR0PBAQD
-AgSwMB0GA1UdDgQWBBRj5uLoIYZHX/b+IlvCAN337VfHpzAkBgNVHREEHTAbgRlj
+3i76LgHtAqSINqsk+1joj4bx4Mwk2Dgc5HMSe2MUAUzBxCXMDdlSSSJMBB8ZTXbf
+uKreoDESTVLQlPm+RnsTDZpMMurznYGq15RrstD8pkxCre6QiGY1Ujwh/qdQQ65G
+xULqYRSpikriJl8mHyUOxz2A56os/sTIzvfdNdC0y3wMUmPOQZMzsLxcxBT9rvtm
+ME3IS5nR9u35X9O0CtNtvP+9VhJ/8mpSaYh2t0FigWJggvB9pRyT7D2YI0y1NpuW
+w3FQeGwDZkvpI6dQxgQKuwNMIZVs39QSu5ltzlrjkFhm4mJKf5Zf1hVjMfKKWJSM
+BDYULea2Iv+fpGU2SkhrSwIDAQABo4GGMIGDMAkGA1UdEwQCMAAwCwYDVR0PBAQD
+AgSwMB0GA1UdDgQWBBRJbzaO73nDGmYlgYL+7tEDhL6+FjAkBgNVHREEHTAbgRlj
 aHJpc21AdmFuY2x1ZXZlcnRlY2guY29tMCQGA1UdEgQdMBuBGWNocmlzbUB2YW5j
-bHVldmVydGVjaC5jb20wDQYJKoZIhvcNAQEFBQADggEBAH5sOPRECuSAXi6eXk1g
-04V407WVxvc2Hu3uuyIIna43VbjI9yJ3C8DpRDxOCJylJCeuINm21CkIYbizUCXo
-E/KLT1S+kpSnNqccX0DHqrDWHPZ8ilWSaWQlMRiK0wXwcPOvRvbEkJETZkIKJxgF
-FdFk9TXbiqYN/owwcHkhfbpoFtP2VQ3jMsGvMsYDq1r2IZvNLH0O1ZFj+LEmG+TL
-E1p79m5ad6mXuceNGNmPacLSkJWLfKZXaxjB8Yz1fINOmnXTBgxP67ix9ini3EM6
-reriQxVYXGlD8ZDuaKlDyVqUbF026ZHIlHKIgg90O037qFPxCBACTtxtYTP2hwug
-Yis=
+bHVldmVydGVjaC5jb20wDQYJKoZIhvcNAQEFBQADggEBALVY07yDy4um9cYp0ku9
+WMZLWUwsxXsqmhnKcKa552NWhrdnjy/jCdc1fWcsyF60X5FZ4OEIHB2WubTa8/Ty
+fWW/FNQMxAYNUzO8XBZGuE/5m8V3dJL8AlUiuiDLfZoeQAVe6zeaeBWYJenxNBRS
+8oLbWQukwSlOP62gMme5mVXM0NKc/MeO2wQSRJXjYoGdDCfqgaIImPg7ExME6Fw+
+g09hCEeualN7su6OZYCUknxeGDmCvfO5fQlGmTzAVewWgGApG7XUvM0gJXV8ks0+
+80WBA6xKwX0zwURD8J7WNieL2iY5AhBg26cHuFLMQGTCyNEeZHZHnJhCwuBcnV1w
+2zQ=
 -----END CERTIFICATE-----

data/lib/aws_runas/cli.rb

@@ -58,13 +58,9 @@ module AwsRunAs
     def read_mfa_if_needed(path: nil, profile: 'default')
       @cfg = AwsRunAs::Config.new(path: path, profile: profile)
       return nil unless @cfg.mfa_required?
-      STDOUT.puts 'Enter MFA code:'
+      STDOUT.print 'Enter MFA code: '
       STDOUT.flush
-      begin
-        STDIN.noecho(&:gets).chomp
-      rescue Errno::EBADF
-        STDIN.gets.chomp
-      end
+      STDIN.gets.chomp
     end
   end
 end

data/lib/aws_runas/config.rb

@@ -17,6 +17,7 @@ require 'inifile'
 module AwsRunAs
   # Manages the configuartion file, including loading and retrieving values.
   class Config
+    attr_reader :profile
     # Finds the configuration file (used if no file is specified).
     # paths searched: ./aws_config, and ~/.aws/config.
     def self.find_config_file

data/lib/aws_runas/main.rb

@@ -78,7 +78,7 @@ module AwsRunAs
 
     def handoff(command: nil, argv: nil)
       env = credentials_env
-      command = AwsRunAs::Utils.shell unless command
+      AwsRunAs::Utils.handoff_to_shell(env: env, profile: @no_role ? nil : @cfg.profile) unless command
       exec(env, command, *argv)
     end
   end

data/lib/aws_runas/utils.rb

@@ -13,13 +13,31 @@
 # limitations under the License.
 
 require 'rbconfig'
+require 'tempfile'
+require 'English'
 
 module AwsRunAs
   # Utility functions that aren't specifically tied to a class.
   module Utils
+    module_function
+
+    # Run an interactive bash session with a special streamed RC file.  The RC
+    # merges a local .bashrc if it exists, with a prompt that includes the
+    # computed message from handoff_to_shell.
+    def bash_with_prompt(env:, path:, message:)
+      rc_data = IO.read("#{ENV['HOME']}/.bashrc") if File.exist?("#{ENV['HOME']}/.bashrc")
+      rc_file = Tempfile.new('aws_runas_bashrc')
+      rc_file.write("#{rc_data}\n") unless rc_data.nil?
+      rc_file.write("PS1=\"\\e[33m(#{message})\\e[0m $PS1\"\n")
+      rc_file.close
+      system(env, path, '--rcfile', rc_file.path)
+    ensure
+      rc_file.unlink
+    end
+
     # load the shell for a specific operating system.
     # if $SHELL exists, load that.
-    def self.shell
+    def shell
       if RbConfig::CONFIG['host_os'] =~ /mswin|windows|mingw32/i
         'cmd.exe'
       elsif ENV.include?('SHELL')
@@ -28,5 +46,28 @@ module AwsRunAs
         '/bin/sh'
       end
     end
+
+    # Compute the message given to the prompt based off supplied profile.
+    def compute_message(profile:)
+      if profile.nil?
+        'AWS'
+      else
+        "AWS:#{profile}"
+      end
+    end
+
+    # "Handoff" to a supported interactive shell. More technically, this runs
+    # an interactive shell with the shell prompt customized to the current
+    # running AWS profile. If the shell is not something we can handle
+    # specifically, just run the shell.
+    def handoff_to_shell(env:, profile: nil)
+      path = shell
+      if path.end_with?('/bash')
+        bash_with_prompt(env: env, path: path, message: compute_message(profile: profile))
+      else
+        system(env, path)
+      end
+      exit $CHILD_STATUS.exitstatus
+    end
   end
 end

data/lib/aws_runas/version.rb

@@ -13,5 +13,5 @@
 # limitations under the License.
 
 module AwsRunAs
-  VERSION = '0.3.1'
+  VERSION = '0.4.0'
 end

data/spec/aws_runas/main_spec.rb

@@ -124,16 +124,6 @@ describe AwsRunAs::Main do
       ENV.store('SHELL', '/bin/sh')
     end
 
-    it 'calls exec with the environment properly set' do
-      expect(@main).to receive(:exec).with(@env, any_args)
-      @main.handoff
-    end
-
-    it 'starts a shell if no command is specified' do
-      expect(@main).to receive(:exec).with(@env, '/bin/sh', *nil)
-      @main.handoff
-    end
-
     it 'execs a command when a command is specified' do
       expect(@main).to receive(:exec).with(anything, '/usr/bin/foo', *['--bar', 'baz'])
       @main.handoff(command: '/usr/bin/foo', argv: ['--bar', 'baz'])

data/spec/aws_runas/utils_spec.rb

@@ -15,6 +15,31 @@
 require 'spec_helper'
 
 describe AwsRunAs::Utils do
+  describe '::bash_with_prompt' do
+    context 'with RC file' do
+      before(:example) do
+        allow(IO).to receive(:read).with("#{ENV['HOME']}/.bashrc").and_return(BASHRC_FILE_CONTENTS)
+      end
+      it 'runs bash with a properly combined RC file' do
+        expect(AwsRunAs::Utils).to receive(:system).with(EXPECTED_ENV, '/bin/bash', '--rcfile', anything)
+        expect_any_instance_of(Tempfile).to receive(:write).with("#{BASHRC_FILE_CONTENTS}\n")
+        expect_any_instance_of(Tempfile).to receive(:write).with(BASHRC_EXPECTED_PROMPT)
+        AwsRunAs::Utils.bash_with_prompt(env: EXPECTED_ENV, path: '/bin/bash', message: 'AWS:rspec')
+      end
+    end
+
+    context 'without RC file' do
+      before(:example) do
+        allow(File).to receive(:exist?).with("#{ENV['HOME']}/.bashrc").and_return(false)
+      end
+      it 'runs bash (no RC file found)' do
+        expect(AwsRunAs::Utils).to receive(:system).with(EXPECTED_ENV, '/bin/bash', '--rcfile', anything)
+        expect_any_instance_of(Tempfile).to receive(:write).with(BASHRC_EXPECTED_PROMPT)
+        AwsRunAs::Utils.bash_with_prompt(env: EXPECTED_ENV, path: '/bin/bash', message: 'AWS:rspec')
+      end
+    end
+  end
+
   describe '::shell' do
     context 'Non-Windows OS' do
       context 'No $SHELL set' do
@@ -49,4 +74,44 @@ describe AwsRunAs::Utils do
       end
     end
   end
+
+  describe '::compute_message' do
+    context 'no profile specified' do
+      it 'returns "AWS" with no profile' do
+        expect(AwsRunAs::Utils.compute_message(profile: nil)).to eq 'AWS'
+      end
+    end
+
+    context 'with profile as "rspec"' do
+      it 'returns "AWS:rspec", indicating that is the profile' do
+        expect(AwsRunAs::Utils.compute_message(profile: 'rspec')).to eq 'AWS:rspec'
+      end
+    end
+  end
+
+  describe '::handoff_to_shell' do
+    context 'with shell as bash' do
+      before(:example) do
+        allow(AwsRunAs::Utils).to receive(:shell).and_return('/bin/bash')
+        allow(AwsRunAs::Utils).to receive(:exit)
+      end
+
+      it 'Loads bash with the rspec profile prompt' do
+        expect(AwsRunAs::Utils).to receive(:bash_with_prompt).with(env: EXPECTED_ENV, path: '/bin/bash', message: 'AWS:rspec')
+        AwsRunAs::Utils.handoff_to_shell(env: EXPECTED_ENV, profile: 'rspec')
+      end
+    end
+
+    context 'with non-prompt supported shell' do
+      before(:example) do
+        allow(AwsRunAs::Utils).to receive(:shell).and_return('/bin/sh')
+        allow(AwsRunAs::Utils).to receive(:exit)
+      end
+
+      it 'starts a default shell without any args' do
+        expect(AwsRunAs::Utils).to receive(:system).with(EXPECTED_ENV, '/bin/sh')
+        AwsRunAs::Utils.handoff_to_shell(env: EXPECTED_ENV, profile: nil)
+      end
+    end
+  end
 end

data/spec/helpers/files/bashrc

@@ -0,0 +1 @@
+foobar

data/spec/helpers/utils_spec.rb

@@ -0,0 +1,15 @@
+require 'spec_helper'
+
+MOCK_BASHRC_PATH = File.expand_path('../files/bashrc', __FILE__)
+
+BASHRC_FILE_CONTENTS = <<EOS.freeze
+foobar
+EOS
+
+BASHRC_EXPECTED_PROMPT = "PS1=\"\\e[33m(AWS:rspec)\\e[0m $PS1\"\n".freeze
+
+EXPECTED_ENV = {
+  'AWS_ACCESS_KEY_ID' => 'AccessKeyId',
+  'AWS_SECRET_ACCESS_KEY' => 'SecretAccessKey',
+  'AWS_SESSION_TOKEN' => 'Token'
+}.freeze

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws_runas
 version: !ruby/object:Gem::Version
-  version: 0.3.1
+  version: 0.4.0
 platform: ruby
 authors:
 - Chris Marchesi
@@ -12,26 +12,26 @@ cert_chain:
   -----BEGIN CERTIFICATE-----
   MIIDjjCCAnagAwIBAgIBATANBgkqhkiG9w0BAQUFADBGMQ8wDQYDVQQDDAZjaHJp
   c20xHjAcBgoJkiaJk/IsZAEZFg52YW5jbHVldmVydGVjaDETMBEGCgmSJomT8ixk
-  ARkWA2NvbTAeFw0xNTExMjMyMzQ3NTdaFw0xNjExMjIyMzQ3NTdaMEYxDzANBgNV
+  ARkWA2NvbTAeFw0xNzAzMTYxNjM0MTZaFw0xODAzMTYxNjM0MTZaMEYxDzANBgNV
   BAMMBmNocmlzbTEeMBwGCgmSJomT8ixkARkWDnZhbmNsdWV2ZXJ0ZWNoMRMwEQYK
   CZImiZPyLGQBGRYDY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
-  uQTxFEI+Xzntwk3P+EAX4alaLkLAUA4x5jVbP4bEaOIfixQkur5js3XS5UfKlxEW
-  Tf4pmiXqlrrLSm5o1EURpQao8DdWkMiAvfr/M8WHTzWng+YmpvctjcGFofq4w+Zk
-  IJ0RsOEKFv7VOSn3qr1Aee9BVXSPb0+yCu6Kjt8u768M2wq8WNQW66XG2+tQW4UT
-  khadeSU2srZfd7H7T3LSzjOtWedcy/foiJvULlWqFuBUv67Qp04GXHT4n5cukuIH
-  eNQgqfa9CIyhzpyyS+mPY8D8ewjIWrptQbUiFeB2dE37xes+uaRMdwwhk2oU6jLV
-  QMv1YG4V3JxFpTNPea5jfQIDAQABo4GGMIGDMAkGA1UdEwQCMAAwCwYDVR0PBAQD
-  AgSwMB0GA1UdDgQWBBRj5uLoIYZHX/b+IlvCAN337VfHpzAkBgNVHREEHTAbgRlj
+  3i76LgHtAqSINqsk+1joj4bx4Mwk2Dgc5HMSe2MUAUzBxCXMDdlSSSJMBB8ZTXbf
+  uKreoDESTVLQlPm+RnsTDZpMMurznYGq15RrstD8pkxCre6QiGY1Ujwh/qdQQ65G
+  xULqYRSpikriJl8mHyUOxz2A56os/sTIzvfdNdC0y3wMUmPOQZMzsLxcxBT9rvtm
+  ME3IS5nR9u35X9O0CtNtvP+9VhJ/8mpSaYh2t0FigWJggvB9pRyT7D2YI0y1NpuW
+  w3FQeGwDZkvpI6dQxgQKuwNMIZVs39QSu5ltzlrjkFhm4mJKf5Zf1hVjMfKKWJSM
+  BDYULea2Iv+fpGU2SkhrSwIDAQABo4GGMIGDMAkGA1UdEwQCMAAwCwYDVR0PBAQD
+  AgSwMB0GA1UdDgQWBBRJbzaO73nDGmYlgYL+7tEDhL6+FjAkBgNVHREEHTAbgRlj
   aHJpc21AdmFuY2x1ZXZlcnRlY2guY29tMCQGA1UdEgQdMBuBGWNocmlzbUB2YW5j
-  bHVldmVydGVjaC5jb20wDQYJKoZIhvcNAQEFBQADggEBAH5sOPRECuSAXi6eXk1g
-  04V407WVxvc2Hu3uuyIIna43VbjI9yJ3C8DpRDxOCJylJCeuINm21CkIYbizUCXo
-  E/KLT1S+kpSnNqccX0DHqrDWHPZ8ilWSaWQlMRiK0wXwcPOvRvbEkJETZkIKJxgF
-  FdFk9TXbiqYN/owwcHkhfbpoFtP2VQ3jMsGvMsYDq1r2IZvNLH0O1ZFj+LEmG+TL
-  E1p79m5ad6mXuceNGNmPacLSkJWLfKZXaxjB8Yz1fINOmnXTBgxP67ix9ini3EM6
-  reriQxVYXGlD8ZDuaKlDyVqUbF026ZHIlHKIgg90O037qFPxCBACTtxtYTP2hwug
-  Yis=
+  bHVldmVydGVjaC5jb20wDQYJKoZIhvcNAQEFBQADggEBALVY07yDy4um9cYp0ku9
+  WMZLWUwsxXsqmhnKcKa552NWhrdnjy/jCdc1fWcsyF60X5FZ4OEIHB2WubTa8/Ty
+  fWW/FNQMxAYNUzO8XBZGuE/5m8V3dJL8AlUiuiDLfZoeQAVe6zeaeBWYJenxNBRS
+  8oLbWQukwSlOP62gMme5mVXM0NKc/MeO2wQSRJXjYoGdDCfqgaIImPg7ExME6Fw+
+  g09hCEeualN7su6OZYCUknxeGDmCvfO5fQlGmTzAVewWgGApG7XUvM0gJXV8ks0+
+  80WBA6xKwX0zwURD8J7WNieL2iY5AhBg26cHuFLMQGTCyNEeZHZHnJhCwuBcnV1w
+  2zQ=
   -----END CERTIFICATE-----
-date: 2016-10-24 00:00:00.000000000 Z
+date: 2017-03-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk
@@ -164,10 +164,12 @@ files:
 - spec/helpers/files/aws_config
 - spec/helpers/files/aws_config_nomfa
 - spec/helpers/files/aws_config_nosource
+- spec/helpers/files/bashrc
+- spec/helpers/utils_spec.rb
 - spec/spec_helper.rb
 homepage: https://github.com/vancluever/aws-runas
 licenses:
-- Apache 2.0
+- Apache-2.0
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -177,7 +179,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.1'
+      version: 2.2.6
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
@@ -185,7 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.5.1
+rubygems_version: 2.6.8
 signing_key: 
 specification_version: 4
 summary: Run a command or shell under an assumed AWS IAM role
@@ -198,4 +200,6 @@ test_files:
 - spec/helpers/files/aws_config
 - spec/helpers/files/aws_config_nomfa
 - spec/helpers/files/aws_config_nosource
+- spec/helpers/files/bashrc
+- spec/helpers/utils_spec.rb
 - spec/spec_helper.rb