feat(cli): process credentials

[hoegertn]

This adds support for the credentials_process feature.

Using the aws-sso-credential-process utility you can also use AWS SSO with this feature

This should fix #3008

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[gitpod-io]

[hoegertn]

@rix0rrr @pahud this worked in my tests. Did I miss something obvious?

[pahud]

@rix0rrr @pahud this worked in my tests. Did I miss something obvious?

I haven't tested it yet. But LGTM. Thanks for your contribution!!

[pahud]

checking the CI log

aws-cdk:   � with default config files › CLI compatible credentials loading › mfa_serial in profile will ask user for token
aws-cdk:     expect(received).toEqual(expected) // deep equality
aws-cdk:     Expected: "Error fetching MFA token: test"
aws-cdk:     Received: "Profile mfa-role did not include credential process"

Looks like this test was failing.

[hoegertn]

Are you able to confirm that it works? So is the code broken or the tests needs change? I think the mock of the Mfa provider is the issue

[pahud]

Are you able to confirm that it works? So is the code broken or the tests needs change? I think the mock of the Mfa provider is the issue

Please see my screenshot. I can confirm it works ,but I have no idea how to fix that test at this time.

Pull request has been modified.

[hoegertn]

I had to modify the MFA test as the MFA error is no longer thrown if there is another cred provider in the chain. I changed it to check the mock to be called instead of relying on the error message.

@rix0rrr It would be great if you could re-approve

Pull request has been modified.

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildProject6AEA49D1-qxepHUsryhcu
• Commit ID: 806e1a2
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).