class Acs2aws::AwsSts

Attributes

encode_saml[RW]
saml[RW]

Public Class Methods

new(encode_saml) click to toggle source
# File lib/acs2aws/aws_sts.rb, line 11
def initialize(encode_saml)
  @encode_saml = encode_saml
  @saml = Nokogiri::XML(Base64.decode64(encode_saml))
  role_entitlement = @saml.xpath('//*[@Name="https://aws.amazon.com/SAML/Attributes/Role"]')
                         .children.children.to_s.split(',')

  # TODO: support customized region.
  client = Aws::STS::Client.new(region: 'ap-southeast-1', credentials: nil)
  resp = client.assume_role_with_saml(
       role_arn: role_entitlement[0],
       principal_arn: role_entitlement[1],
       saml_assertion: @encode_saml,
       # 12 hours
       duration_seconds: 43200
   )
  # puts resp
  system "aws configure --profile default set aws_access_key_id #{resp.credentials.access_key_id}"
  system "aws configure --profile default set aws_secret_access_key #{resp.credentials.secret_access_key}"
  system "aws configure --profile default set aws_session_token #{resp.credentials.session_token}"

  puts "Successfully refresh. Expiration at #{resp.credentials.expiration}".colorize(:green)
end