awssume 0.3.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 17c2f5df473de43d443a7dc2774415683c458cbc
-  data.tar.gz: f0becdfff548d13be22f5c520f3cfc0061e147b1
+  metadata.gz: f5b2f4724c8cf4695843ee6682235531f3baf7ec
+  data.tar.gz: 97de699e604d22c9d6ce0f517e2d1f312f9e7727
 SHA512:
-  metadata.gz: eebeef825ab3c35b834a9fb2c04aa94467802241c77a0bcb52cd2a6b26b0187f5275370b9f5007a3e3cb4e02b3ed3e3fac9fb1a44cc38148b6cab78c8db15a53
-  data.tar.gz: db803f864564ba657b708ac774f919bc03d5b7c86aee47b097375e482fc1f249f572592239047c749fa28a84692bbe037bb83e8498145350f9b149cde26b5fa6
+  metadata.gz: f8082eede35e521f86bb281d709169ae91cbf365dd92c0b48db4288774b522f1c37d4a09d2d79968476fce50b88fbec8588175ccc94773e558657f4dadae4abb
+  data.tar.gz: b67343095b3e9f89246a142d79087fda0b29b086570e1aad8af335792e6dd9e93bfd769d7f313738fcb1c0ecaa713ae824f4b3943cc1695772ad16f9acb933fc

data/.gitignore

@@ -7,4 +7,4 @@
 /pkg/
 /spec/reports/
 /tmp/
-/vendor/bundle/
+/vendor/

data/README.md

@@ -48,7 +48,7 @@ You can configure env vars to authenticate with AWS:
 ```
 
 If AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY aren't set then other
-authentication options are checked(such as instance profiles).  This is
+authentication options are checked (such as instance profiles).  This is
 functionality provided by the aws-sdk.
 
 ```
@@ -67,7 +67,7 @@ functionality provided by the aws-sdk.
 There are scenarios where you might want to [use an external id][aws_ext_id]
 in a condition on your assume role policy. For such cases, the gem will look
 for the ``AWS_ROLE_EXTERNAL_ID`` variable in your environment. If this variable
-is set the value will be sent allong in the STS Assume Role request.
+is set the value will be sent along in the STS Assume Role request.
 
 ```
   $ AWS_ROLE_ARN=arn::aws::iam::123456789012:role/RoletoAssume \
@@ -77,6 +77,18 @@ is set the value will be sent allong in the STS Assume Role request.
 
 [aws_ext_id]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
 
+It's also possible to request credentials that
+[last longer than the default of one hour](https://aws.amazon.com/about-aws/whats-new/2018/03/longer-role-sessions/)
+if the role you're assuming is configured to support them (``MaxSessionDuration``
+greater than 3600 seconds). Here's an example of assuming 12-hour (43200 second; the maximum)
+credentials for a _really_ long-running command:
+
+```
+  $ AWS_ROLE_ARN=arn::aws::iam::123456789012:role/RoletoAssume \
+    AWS_ROLE_DURATION_SECONDS=43200 \
+      awssume really-long-running-command
+```
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run

data/Rakefile

@@ -3,4 +3,9 @@ require "rspec/core/rake_task"
 
 RSpec::Core::RakeTask.new(:spec)
 
-task :default => :spec
+task :default => [:help]
+
+desc "Display the list of available rake tasks"
+task :help do
+  system("rake -T")
+end

data/lib/awssume.rb

@@ -11,7 +11,8 @@ module Awssume
       region:            config.region,
       role_arn:          config.role_arn,
       role_session_name: config.role_session_name,
-      external_id:       config.external_id
+      external_id:       config.external_id,
+      duration_seconds:  config.duration_seconds,
     )
     aws_env = {
       'AWS_REGION'         => config.region,

data/lib/awssume/adapter/aws_client.rb

@@ -24,10 +24,13 @@ module Awssume
         p = {
           role_arn: config[:role_arn],
           role_session_name: role_session_name,
-          external_id: config[:external_id]
+          external_id: config[:external_id],
+          duration_seconds: config[:duration_seconds],
         }
 
         p.delete(:external_id) unless p[:external_id]
+        p.delete(:duration_seconds) \
+          if p[:duration_seconds].nil? || p[:duration_seconds] == 0
 
         p
       end

data/lib/awssume/configuration.rb

@@ -19,7 +19,8 @@ module Awssume
     # The utility will function without issue if an optional value is missing
     def self.options
       {
-        external_id: ENV['AWS_ROLE_EXTERNAL_ID']
+        external_id:       ENV['AWS_ROLE_EXTERNAL_ID'],
+        duration_seconds:  ENV['AWS_ROLE_DURATION_SECONDS'].to_i
       }
     end
 

data/lib/awssume/version.rb

@@ -1,3 +1,3 @@
 module Awssume
-  VERSION = "0.3.0"
+  VERSION = "1.0.0"
 end

metadata

@@ -1,55 +1,55 @@
 --- !ruby/object:Gem::Specification
 name: awssume
 version: !ruby/object:Gem::Version
-  version: 0.3.0
+  version: 1.0.0
 platform: ruby
 authors:
 - reppard
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2016-10-14 00:00:00.000000000 Z
+date: 2018-08-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '10.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '10.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: aws-sdk
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '>='
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0'
 description: This is a gem for assuming an AWS IAM role and using the returned temporary
@@ -61,8 +61,8 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- .gitignore
-- .rspec
+- ".gitignore"
+- ".rspec"
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -87,17 +87,17 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.0.14.1
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: Assume a role, do a thing.