aws / aws/aws-codebuild-docker-images
local_builds/codebuild_build.sh does not support the new sso session credentials
- Dominant language
- Dockerfile
- Stars
- 1.2k
- Forks
- 971
- Avg merge
- 2h 47m
- Merged PRs (30d)
- 1
Description
**Describe the bug**
local_builds/codebuild_build.sh does not support the new sso session credentials.
The new sso sessions have `sso_region`, `sso_start_url` in the sessions stanza of `~/.aws/config` not under the profile.
**To Reproduce**
Steps to reproduce the behavior:
1. Use SSM or SecretsManager items in your buildspec yaml
**Expected behavior**
Use `[sso-session]` stanzas from `~/.aws/config` to authenticate to AWS and retrieve Secrets, etc.
**Logs**
build_1 | panic: profile "admin" is configured to use SSO but is missing required configuration: sso_region, sso_start_url
**Platform**
- OS: Mac x86
**Additional context**
Running custom docker image
Contributor guide
Research direction
Start with local_builds/codebuild_build.sh and inspect how it reads AWS profiles and credentials. Reproduce the issue with an ~/.aws/config containing an [sso-session] stanza and a buildspec that uses SSM or SecretsManager items. Done means the script authenticates using the session configuration and retrieves those items without the missing sso_region or sso_start_url panic.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, shell
- Domain
- build-system, cloud
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100