@ossy/deployment-tools 0.0.46 → 0.0.47

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ossy/deployment-tools",
-  "version": "0.0.46",
+  "version": "0.0.47",
   "description": "Collection of scripts and tools to aid deployment of containers and static files to Amazon Web Services through GitHub Actions",
   "main": "./src/index.js",
   "scripts": {

package/src/aws-credentials/aws-credentials.js

@@ -35,6 +35,7 @@ class AwsCredentialsService {
         sessionToken: responseData.Credentials.SessionToken,
         secretAccessKey: responseData.Credentials.SecretAccessKey
       }))
+      .then(x => AwsCredentialsService.exportCredentialsToGithubWorkflow({ ...x, awsRegion: platformConfig.awsRegion }))
       .catch(error => {
         logError({ message: '[AwsCredentialsService] Could not resolve temporary credentials', error })
         return undefined
@@ -44,7 +45,7 @@ class AwsCredentialsService {
   static exportCredentialsToGithubWorkflow(params) {
     // Configure the AWS CLI and AWS SDKs using environment variables and set them as secrets.
     // Setting the credentials as secrets masks them in Github Actions logs
-    const { accessKeyId, secretAccessKey, sessionToken } = params
+    const { accessKeyId, secretAccessKey, sessionToken, awsRegion } = params
 
     // AWS_ACCESS_KEY_ID:
     // Specifies an AWS access key associated with an IAM user or role
@@ -65,6 +66,15 @@ class AwsCredentialsService {
       // clear session token from previous credentials action
       core.exportVariable('AWS_SESSION_TOKEN', '')
     }
+
+    if (awsRegion) {
+      core.exportVariable('AWS_REGION', awsRegion)
+    } else if (process.env.AWS_REGION) {
+      // clear AWS_REGION from previous credentials action
+      core.exportVariable('AWS_REGION', '')
+    }
+
+    return params
   }
 
 }

package/src/aws-credentials/cli.js

@@ -2,6 +2,8 @@
 const arg = require('arg')
 const { AwsCredentialsService } = require('./aws-credentials')
 
+const { PlatformTemplateService } = require('../template')
+const { PlatformConfigService } = require('../config')
 const { logInfo, logError } = require('../log')
 
 //eslint-disable-next-line no-unused-vars
@@ -23,6 +25,32 @@ const resolveCredentials = () => {
   })
 }
 
+const assumeRole = () => {
+  logInfo({ message: 'assume-role' })
+
+  const parsedArgs = arg({
+    '--platforms': String,
+    '--target-platform': String
+  }, { argv: options })
+
+  const [platformName] = parsedArgs['--target-platform']
+
+  PlatformTemplateService.readFromFile(parsedArgs['--platforms'] || process.env.PLATFORMS)
+    .then(templates => templates.map(PlatformConfigService.from))
+    .then(configs => configs.find(x => x.platformName === platformName))
+    .then(targetConfig => {
+
+      if (!targetConfig) {
+        return logError({ message: 'No configuration found' })
+      }
+
+      AwsCredentialsService.resolveAwsCredentials(targetConfig)
+        .then(() => logInfo({ message: `Assumed role for ${targetConfig.platformName}` }))
+
+    })
+
+}
+
 !!command
-  ? { 'resolve-credentials': resolveCredentials }[command]()
+  ? { 'resolve-credentials': resolveCredentials, 'assume-role': assumeRole }[command]()
   : logError({ message: 'No command provided' })