Skip to content

Commit

Permalink
Link to AWS docs for assuming role and role chaining
Browse files Browse the repository at this point in the history
Signed-off-by: Scott Rigby <[email protected]>
  • Loading branch information
scottrigby committed Jan 10, 2020
1 parent 1793137 commit 5ee329c
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions USAGE.md
Original file line number Diff line number Diff line change
Expand Up @@ -303,8 +303,8 @@ security of the setup. You can execute the same test as before to see it for you

### Assuming a role for more than 1h

If you try to assume a role from an opened (temporary) session, AWS considers that as *role
chaining* and it limits your ability to assume the target role to only **1h**. Trying to use
If you try to [assume a role](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-role.html) from an opened (temporary) session, AWS considers that as [role
chaining](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-role-chaining) and it limits your ability to assume the target role to only **1h**. Trying to use
`--duration` with a value bigger than **1h** will result in an error:
```
aws-vault: error: Failed to get credentials for default (source profile for pix4d): ValidationError: The requested DurationSeconds exceeds the MaxSessionDuration set for this role.
Expand Down

0 comments on commit 5ee329c

Please sign in to comment.