[cli] Cache mfa credentials
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 83
Description
Re-creating this issue since #9855 don't show up in the list of issues after the account that posted it was deleted.
----
It's great to see that the CDK CLI now supports MFA since #6510 was merged! However, the MFA credentials are not cached, which means that for every deploy/synth/diff it requires you to enter your MFA credentials again.
### Use Case
As a user I would like to not have to enter my MFA credentials for every CLI command.
### Proposed Solution
Cache the credentials in some way for some amount of time so that users don't have to enter their MFA credentials every time they call a CLI command.
This is a 🚀 Feature Request
Contributor guide
Research direction
Start by reviewing the existing MFA support referenced in #6510 and the CDK CLI paths used by deploy, synth, and diff. Determine how credentials are currently requested and what secure cache duration and behavior the issue requires. Done means repeated CLI commands no longer require MFA entry during the agreed cache period.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- authentication, cli, cloud, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100