stscache

package

v0.1.0 Latest Latest Go to latest Published: May 28, 2026 License: MIT Imports: 4 Imported by: 0

Details

Package stscache caches `aws sts get-caller-identity` JSON for callers that re-resolve the active AWS identity on every coily invocation. STS

View Source

const TTL = 1 * time.Hour

TTL is the freshness window for cached identity responses. Chosen at the high end of "stable for hours" - role assumption sessions typically

This section is empty.

func CallerIdentity(fetch func() ([]byte, error)) ([]byte, error)

CallerIdentity returns the JSON body of `aws sts get-caller-identity --output json`, served from cache if a fresh entry exists for the

func Invalidate() error

Invalidate drops the cached entry for the active profile. Callers that know they just rotated credentials or assumed a different role can use

This section is empty.