aws / aws/aws-codebuild-docker-images

local_builds/codebuild_build.sh does not support the new sso session credentials

Open
#597 0 comments 1 reaction 0 assignees View on GitHub
CodeBuild-local feature request
Dominant language
Dockerfile
Stars
1.2k
Forks
971
Avg merge
2h 47m
Merged PRs (30d)
1

Description

**Describe the bug**
local_builds/codebuild_build.sh does not support the new sso session credentials.

The new sso sessions have `sso_region`, `sso_start_url` in the sessions stanza of `~/.aws/config` not under the profile.

**To Reproduce**
Steps to reproduce the behavior:
1. Use SSM or SecretsManager items in your buildspec yaml

**Expected behavior**
Use `[sso-session]` stanzas from `~/.aws/config` to authenticate to AWS and retrieve Secrets, etc.

**Logs**
build_1 | panic: profile "admin" is configured to use SSO but is missing required configuration: sso_region, sso_start_url

**Platform**
- OS: Mac x86

**Additional context**
Running custom docker image

Contributor guide

Open the contributing guide

Research direction

Start with local_builds/codebuild_build.sh and inspect how it reads AWS profiles and credentials. Reproduce the issue with an ~/.aws/config containing an [sso-session] stanza and a buildspec that uses SSM or SecretsManager items. Done means the script authenticates using the session configuration and retrieves those items without the missing sso_region or sso_start_url panic.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, shell
Domain
build-system, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.