aws / aws/aws-toolkit-azure-devops

Support for role chaining

Open
#611 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
258
Forks
114
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**

When using a central account to deploy to sub accounts, it's necessary to configure multiple connections with access keys and assume role names.

**Describe the solution you'd like**

A solution to chain roles from primary connection to sub connection provides a convenient solution to reduce duplication of access keys. For instance, in the connection configuration, add an input field for source connection (containing user access key) and assume role arn/name which would then be assumed during task execution.

**Describe alternatives you've considered**

Separate assume role arn/name parameters can be added to each task input to achieve the same effect. However, this approach requires change to all tasks and incurs additional maintenance overhead.

**Additional context**

I can create a PR with the necessary changes if the feature is approved.

Contributor guide

Open the contributing guide

Research direction

Start by locating the connection configuration and task execution paths mentioned in the issue, then trace how access keys and assume-role names are currently passed to tasks. The work is done when a source connection can assume the configured role for a sub-account without duplicating credentials or changing every task input. The payload does not name specific files or tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, devops
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.