From 5ee329cba48a8f3ea4b661a2013abb47da4a75c3 Mon Sep 17 00:00:00 2001 From: Scott Rigby Date: Fri, 10 Jan 2020 17:14:02 -0500 Subject: [PATCH] Link to AWS docs for assuming role and role chaining Signed-off-by: Scott Rigby --- USAGE.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/USAGE.md b/USAGE.md index 073bfff42..9d26f6383 100644 --- a/USAGE.md +++ b/USAGE.md @@ -303,8 +303,8 @@ security of the setup. You can execute the same test as before to see it for you ### Assuming a role for more than 1h -If you try to assume a role from an opened (temporary) session, AWS considers that as *role -chaining* and it limits your ability to assume the target role to only **1h**. Trying to use +If you try to [assume a role](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-role.html) from an opened (temporary) session, AWS considers that as [role +chaining](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-role-chaining) and it limits your ability to assume the target role to only **1h**. Trying to use `--duration` with a value bigger than **1h** will result in an error: ``` aws-vault: error: Failed to get credentials for default (source profile for pix4d): ValidationError: The requested DurationSeconds exceeds the MaxSessionDuration set for this role.