Documentation
¶
Overview ¶
Package awsauth provides AWS cross-account role assumption for simrun. AWS connectors specify a role_arn in their config; simrun assumes the role via STS before each scenario and injects temporary credentials into the per-run environment.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AssumeRole ¶
AssumeRole performs STS AssumeRole with retry logic for eventual consistency.
func ResolveCredentials ¶
ResolveCredentials resolves the current AWS credentials using the default credential chain (which supports IRSA, instance profiles, env vars, etc.) and returns them as a map suitable for environment variable injection. This is needed for GCP WIF on EKS: the Google Cloud external account library only reads AWS credentials from env vars or IMDS, but IRSA provides credentials via AWS_WEB_IDENTITY_TOKEN_FILE which the Google library doesn't understand.
Types ¶
This section is empty.
Source Files