From 0f3b73d76ed98b039464446266e40aab4bc4e310 Mon Sep 17 00:00:00 2001 From: Aaron Vinson Date: Mon, 10 Jun 2019 17:58:40 -0700 Subject: [PATCH] Truncate username for GetFederationToken (#377) --- cli/login.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/cli/login.go b/cli/login.go index c27ceb510..631edc404 100644 --- a/cli/login.go +++ b/cli/login.go @@ -219,6 +219,11 @@ func getFederationToken(creds credentials.Value, d time.Duration, region string) return nil, err } + // truncate the username if it's longer than 32 characters or else GetFederationToken will fail. see: https://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.html + if len(currentUsername) > 32 { + currentUsername = currentUsername[0:32] + } + params := &sts.GetFederationTokenInput{ Name: aws.String(currentUsername), DurationSeconds: aws.Int64(int64(d.Seconds())),