aws-sso-util
and aws-sso-lib
use monotonic versioning.
- Update to jsonschema major version 4 for issue #117.
- Update to PyYAML 6.0.1 for Cython issue (#104 (see yaml/pyyaml#601)).
- Update login text to match AWS CLI, provide inputs for custom login text to use
verificationUriComplete
(#92). - Error handling for missing expiration in cached token.
- CloudFormation functionality now excludes suspended accounts from OU traversal (#80 via #81).
- Upgrade to
click
8 (#85).
aws-sso-util login
addsreceivedAt
time to token cache entry.- Improved
aws-sso-util check
feedback.- Displays
receivedAt
time for token if present. - Validates apparently-valid cached token by attempting to list one page of available accounts.
- Displays
- Add
--check-profile
option toaws-sso-util check
for pulling configuration from a profile.
- Remove support for Python 3.6 (removed in
boto3
). - Fix
aws-sso-credential-process
forbotocore
change.
- Log normal output to stdout (#54).
- Fix short region names for GovCloud in
aws-sso-util configure populate
andaws-sso-util configure profile
(#55). - Update
aws-sso-util login
to use--force-refresh
for consistency with other commands (--force
still works). aws-sso-util check
now provides more information about the token cache.
- Added
--account-name-case
and--role-name-case
toaws-sso-util configure populate
(#48). aws-sso-util check
logs version and timestamp information.- Fixed bug in
aws-sso-util configure profile
with Python 3.6
- Add
aws-sso-util run-as
command (#44). Read the docs here. - Add
aws-sso-util console
commands (#47). Read the docs here. - Better debugging of token issues in
aws-sso-util check
(#45).- Note that the token is checked by default, which is a slight backwards-incompatible change if you were relying on a success return code to check specifically if the instance was configured correctly; for this situation, use
--skip-token-check
.
- Note that the token is checked by default, which is a slight backwards-incompatible change if you were relying on a success return code to check specifically if the instance was configured correctly; for this situation, use
- Ignore
AWS_PROFILE
andAWS_DEFAULT_PROFILE
environment variables for commands that don't use them (#41). - Standardize account option as
--account-id
across commands (with backwards compatibility). - Include component names in
aws-sso-util configure populate
help (#33). - Fix
aws-sso-util login --all
when environment variables are set.
- Fix macro not recognizing all intrinsic functions
- Fix profile names in
aws-sso-util configure populate
to remove square brackets per #31
- Add
aws-sso-util check
command aws-sso-util configure populate
: Addednum_regions
for process formatter- Increased
aws_sso_lib
logging with--verbose
- Fixed instance-finding exceptions
- Renamed some env var variable names
- Fix default session duration extraction
- Fix processing templates with no assignment groups
- Fix name fetching error with
!Ref
principal or target
login()
addsreceivedAt
timestamp to token dict.
- Remove support for Python 3.6 (removed in
boto3
). - Fix
get_credentials()
forbotocore
change.
- Improvements to
SSOTokenFetcher
to support betteraws-sso-util check
functionality. - Fixed type annotations.
lookup_accounts_for_ou()
now caches calls toorganizations.DescribeOrganization
.
get_boto3_session()
now ignoresAWS_PROFILE
andAWS_DEFAULT_PROFILE
environment variables.- Add
find_all_instances()
function toconfig
package. - Update
botocore
dependency forJSONFileCache.__delitem__
support (#46). - Fix
logout()
return values to match docs.
- Add
expiry_window
tologin()
- Add
user_auth_handler
tologin()
per #25
- Write AWS SSO token expiration in correct ISO format
- Added configurable token expiry window to login()
- Bug fix and better logging for instance-finding