From b5e0cab6184ce3d3cb1eae72d2bd776469e0c334 Mon Sep 17 00:00:00 2001 From: Michael Tibben Date: Wed, 8 Jan 2020 23:56:50 +1100 Subject: [PATCH] Only need to skip MFA if it is present --- vault/vault.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vault/vault.go b/vault/vault.go index 1d5510c67..4f0fe2023 100644 --- a/vault/vault.go +++ b/vault/vault.go @@ -147,7 +147,7 @@ func (c *CredentialLoader) ProviderWithChainedMfa(profileName string, isChained sourceCredProvider = NewMasterCredentialsProvider(c.Keyring, config.ProfileName) } else if config.SourceProfile != "" { sourceCredProvider, err = c.ProviderWithChainedMfa(config.SourceProfile, true, config.MfaSerial) - if err == nil { + if err == nil && config.MfaSerial != "" { skipMfaBecauseSourceProfileHasItCovered = true config.MfaSerial = "" }