Using --all-profiles with no access to ListAccountAliases api call #218
Labels
triaged
triaged into Okta's Jira backlog
waiting-response
Waiting on collaborator with follow up information
When using
--all-profiles
to get all available credentials, some roles may not have access to the ListAccountAliases api call. An example is the AWS Managed PowerUserAccess role. This produces a non-intuitive profile name in.aws/credentials
.Furthermore, if you have multiple cases in the same idp the failover default name is identical and credentials get overwritten.
It would be nice to add a section to the config yaml for known aliases in order to render the names correctly.
I can provide a PR if this feature would be considered.
The text was updated successfully, but these errors were encountered: