@wraps.dev/cli 2.21.12 → 2.21.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Binary file
package/dist/cli.js CHANGED
@@ -33875,14 +33875,23 @@ Run ${pc47.cyan("wraps selfhost deploy")} to deploy the self-hosted control plan
33875
33875
  console.log(`${key}=${value}`);
33876
33876
  }
33877
33877
  console.log("");
33878
- console.log(
33879
- "# AWS credentials for role assumption \u2014 create an IAM user in your account"
33880
- );
33881
- console.log(
33882
- `# with sts:AssumeRole permission on arn:aws:iam::${identity.accountId}:role/wraps-console-access-role`
33883
- );
33884
- console.log("# AWS_ACCESS_KEY_ID=<fill-in>");
33885
- console.log("# AWS_SECRET_ACCESS_KEY=<fill-in>");
33878
+ console.log("# =============================================================================");
33879
+ console.log("# AWS Backend Credentials \u2014 Vercel OIDC (recommended)");
33880
+ console.log("# =============================================================================");
33881
+ console.log("#");
33882
+ console.log("# 1. In Vercel: Project Settings \u2192 Cloud \u2192 Configure AWS");
33883
+ console.log("# Copy the OIDC Provider URL (looks like https://oidc.vercel.com/<team-id>)");
33884
+ console.log("#");
33885
+ console.log("# 2. In AWS IAM \u2192 Identity providers \u2192 Add provider:");
33886
+ console.log("# Provider type: OpenID Connect");
33887
+ console.log("# Provider URL: <your Vercel OIDC URL from step 1>");
33888
+ console.log("# Audience: sts.amazonaws.com");
33889
+ console.log("#");
33890
+ console.log("# 3. Create an IAM role that trusts that OIDC provider, with this permission:");
33891
+ console.log(`# sts:AssumeRole on arn:aws:iam::${identity.accountId}:role/wraps-console-access-role`);
33892
+ console.log("#");
33893
+ console.log("# 4. Set AWS_ROLE_ARN to that role's ARN in Vercel:");
33894
+ console.log(`# AWS_ROLE_ARN=arn:aws:iam::${identity.accountId}:role/<your-vercel-backend-role>`);
33886
33895
  clack44.outro(
33887
33896
  pc47.dim(
33888
33897
  "Paste into Vercel \u2192 Settings \u2192 Environment Variables \u2192 Add from .env"