config-profiles
now always uses the latest list of profiles from AWS #430- Specifying the FQDN for the start url hostname now works #434
- Now support overriding the timestamp when building via
BUILDINFOS
env var
v1.9.4 - 2022-09-29
- Fix macOS amd64 release binary #427
- Fix role loop detection regression #425
v1.9.3 - 2022-09-29
- Update to Golang v1.18
- Add
ConfigProfilesBinaryPath
option and use $PATH with NIX #410 - NIX users will use
aws-sso
forcredential_process
aws-sso config
no longer prompts to backup a config file if it doesn't exist. #402- Fix cross-compiling on macOS #407
- Fix role lookup when defined in the config.yaml #412
- Fix bug retrieving data from Windows CredStore
v1.9.2 - 2022-05-13
- Auto-completion is now context sensitive to the
--sso
,--account
, and--role
flags and filters results accordingly. #382 - Add zsh support for shell helpers #360
- Firefox container name color & icon will be pseudo-randomized if you don't specify a Color/Icon tag #392
config
wizard now intelligently selects a default value forConfigProfilesUrlAction
#387- Add support for Granted Containers Firefox plugin #400
UrlAction
andConfigProfilesUrlAction
now supportopen-url-in-container
andgranted-containers
- Replace
list --profile-prefix
with a more flexiblelist --prefix
option #395 FirefoxOpenUrlInContainer
config option has been deprecated
- Fix broken
completions
for zsh and fish
v1.9.1 - 2022-05-09
- Fix
config
command when user has noUrlExecCommand
defined #385 console
no longer warns when a role is missing the Color or Icon tag
v1.9.0 - 2022-05-08
- Support assuming roles bash without forking a shell and with auto-completion support of AWS Profile names. #357
- Add
completions
command which supports--install
and--uninstall
flags Please see the quickstart for more details. - Enhanced
list
command with CSV output and basic filtering - Add
config
command to re-run through the setup wizard #354 - Added many more configuration options to the setup wizard
list
command can now generate a CSV via--csv
flag- You can now specify the same StartURL in multiple SSOConfig blocks so you can authenticate as different users at the same time.
- Users can now specify their AWS SSO roles
CacheRefresh
interval instead of the hard coded 24hrs. #355
- Added
Profile
to the list of default fields for thelist
command - Replaced the command
install-completions
with a more powefulcompletions
- Renamed the
config
command to update~/.aws/config
to beconfig-profiles
which is hopefully more clear config
command now runs the configuration wizard- Deprecated
ConfigUrlAction
option. Will be automatically upgraded by theaws-sso config
wizard. ConfigProfilesUrlAction
replacesConfigUrlAction
- Fixed setup wizard layout to be less ugly and more consistent.
ConsoleDuration
and the--duration
flag foraws-sso console
are now correctly limited to 12hrs/720min #379- Multiple AWS SSO Instances are now properly supported (only) with Firefox Containers
v1.8.1 - 2022-05-02
- Add Color and Icon support to Firefox Containers #340
- Auto detect new roles and auto-update ~/.aws/config #341
- Firefox container support is now handled by guided setup
- Fix documentation for
UrlExecCommand
config option (was listed asUrlActionExec
)
- Add
revive
as a linter
v1.8.0 - 2022-04-30
- Add support for Firefox Containers for multiple AWS Console sessions #336
console
command now works whenAWS_PROFILE
is set to static creds #332- Fix
console
URL redirect to wrong URL #328
v1.7.5 - 2022-03-29
- No longer generate errors for empty History tag in cache #305
- No longer print the federated console url on errors by default #314
- Fully delete items from the keyring #320
- Fixed error when tried to save more than 2.5Kbytes in wincred #308
- Add support for --url-action printurl and exec #303
list
command now prints how long until the AWS SSO session expires #313
- Add additional unit tests
- Document how using
$AWS_PROFILE
with AWS SSO CLI auto-refreshes credentials #270
v1.7.4 - 2022-02-25
- Fix crash when users have many roles or accounts in AWS SSO
- Fix crash opening empty json store files
- Fix crash with AWS AccountIDs in ~/.aws-sso/config.yaml with leading zeros #292
- Add unit tests for AWS SSO API calls
- No longer read ~/.aws/credentials via AWS Go SDK for slightly better security #280
v1.7.3 - 2022-02-10
- Fix argument parsing with
process
command which broke the command #286
v1.7.2 - 2022-02-05
- Cached AWS SSO AccessToken is sometimes invalid even though it was not expired and any calls to SSO were failing. #279
console -P
is nowconsole -p
to force prompting- Update to AWS Go SDK v2
- Support specifying the role to assume via the
-p
/--profile
flag #268
v1.7.1 - 2022-01-16
AWS_SSO
env var is now set with theeval
andexec
command #251- Fix broken auto-complete for non-Default AWS SSO instances #249
- Fix incorrect
AWS_SSO_SESSION_EXPIRATION
values #250 - Remove old config settings that no longer exist #254
cache
command no longer flushes the Expires field for role credentials or the role History- Auto-guided setup now loads the config so the user defined command is successful #260
- default
list
command will now refresh the cache if necessary
flush
now flushes the STS IAM Role credentials first by default #236- Guided setup now uses the hostname or FQDN instead of full URL for the SSO StartURL #258
- Add a lot more
ProfileFormat
functions via sprig #244 flush
command gives users more control over what is flushed- Add documentation for
SourceIdentity
for AssumeRole operations - Add
EnvVarTags
config file option #134
v1.7.0 - 2022-01-09
- Add
Via
andSSO
to possiblelist
command output fields - Add
SSO
to list of valid ProfileFormat template variables - Improve ProfileFormat documentation
- Add
config
command to manage~/.aws/config
#157 - Add Quick Start Guide
console
command now works with any credentials using$AWS_PROFILE
#234
- Fix broken FirstItem and StringsJoin ProfileFormat functions
- Default ProfileFormat now zero-pads the AWS AccountID
- Fix crash with invalid History tags
eval
command now supports--url-action=print
v1.6.1 - 2021-12-31
- The
Via
role option is now a searchable tag #199 - The
tags
command now returns the keys in sorted order
- Consistently pad AccountID with zeros whenever necessary
- Detect role chain loops using
Via
#194 - AccountAlias/AccountName tags are inconsistenly applied/missing #201
- Honor config.yaml
DefaultSSO
#209 - Setup now defaults to
warn
log level instead ofinfo
#214 console
command did not know when you are using a non-Default SSO instance #208- cache now handles multiple AWS SSO Instances correctly which fixes numerous issues #219
- Reduce number of warnings #205
v1.6.0 - 2021-12-24
- Fix issue with missing colon in parsed/generated Role ARNs for missing AWS region #192
- Setup now prompts for
LogLevel
- Suppress bogus warning when saving Role credentials in
wincred
store #183 - Add support for role chaining using
Via
tag #38 - Cache file is now versioned for better compatibility across versions of
aws-sso
#195
- Incorrect
--level
value now correctly tells user the correct name of the flag exec
command now usescmd.exe
when no command is specified
v1.5.1 - 2021-12-15
- Setup now prompts for
HistoryMinutes
andHistoryLimit
- Setup now uses a smaller cursor which doesn't hide the character
- Fix setup bug where the SSO Instance was always called
Default
- Setup no longer accepts invalid characters for strings #178
- Fix error/bell sound on macOS when selecting options during setup #179
v1.5.0 - 2021-12-14
- Add
HistoryMinutes
option to limit history by time, not just count #139
- Now use macOS
login
Keychain instead ofAWSSSOCli
#150 - All secure storage methods now store a single entry instead of multiple entries
- Replace
console --use-sts
withconsole --prompt
#169 - Improve password prompting for file based keyring #171
- file keyring will no longer infinitely prompt for new password
v1.4.0 - 2021-11-25
- Standardize on
AWS_SSO
prefix for environment variables - Remove
--region
flag foreval
andexec
commands console -use-env
is nowconsole --use-sts
to be more clear- Building aws-sso now requires Go v1.17+
- Add a simple wizard to configure aws-sso on first run if no ~/.aws-sso/config.yaml file exists
- Update interactive selected item color schme to stand our better. #138
- Add
eval --clear
andeval --refresh
- Add full support for
DefaultRegion
in config.yaml - Add
--no-region
flag foreval and
exec` commands - Add
process
command for AWS credential_process in ~/.aws/config #157 - Add
ConsoleDuration
config option #159 - Improve documentation of environment variables
exec
now updates the ENV vars of the forked processs rather than our own processeval
no longer prints URLs #145- Will no longer overwrite user defined AWS_DEFAULT_REGION #152
- Fix bug where cache auto-refresh was not saving the new file, causing future runs to not utilize the cache
- Remove
--duration
option from commands which don't support it LogLevel
andUrlAction
in the config yaml now work #161- Add more unit tests & fix underlying bugs
v1.3.1 - 2021-11-15
- Fix missing --url-action and --browser #113
- Don't print out URL when sending to browser/clipboard for security
- Escape colon in ARN's for
-a
flag to work around the colon being a word delimiter for bash (auto)complete. #135 - Add initial basic setup if there is a missing config.yaml #131
v1.3.0 - 2021-11-14
- Add report card and make improvements to code style #124
- Add auto-complete support #12
- Add golangci-lint support & config file
- Sort History tag based on time, not alphabetical
- History entries now have how long since it was last used #123
v1.2.3 - 2021-11-13
- Add support for tracking recently used roles via History tag for exec & console #29
- Continue to improve unit tests
- Fix bugs in
tags
command when using -A or -R to filter results - Fix missing tags when not defining roles in config.yaml #116
- Fix bad Linux ARM64/AARCH64 rpm/deb packages with invalid binaries
v1.2.2 - 2021-11-11
- Add
AccountAlias
andExpires
to list of fields that can be displayed via thelist
command AccountAlias
replacesAccountName
in the list of default fields forlist
- Add RPM and DEB package support for Linux on x86_64 and ARM64 #52
v1.2.1 - 2021-11-03
- Add customizable color support #79
- Simplify options for handling URLs and refactor internals #82
- Rework how defaults are handled/settings loaded
- Remove references to
duration
in config which don't do anything - Add additional config file options:
- UrlAction
- LogLevel
- LogLines
- DefaultSSO
- Replace
--print-url
with--url-action
#81 - Add support for
DefaultRegion
in config file #30 console
command now supports--region
list
command now reports expired and has constant sorting of roles #71- Fix bug where STS token creds were cached, but not reused.
list -f
now sorts fields- Use cache for tracking when STS tokens expire
exec
command now ignores arguments intended for the command being run #93- Remove
-R
as a short version of--sts-refresh
to avoid collision with exec role #92 - Fix finding $HOME directory on Windows and make GetHomePath() cross platform #100
- Fix issue with AWS AccountID's with leading zeros. #96
- Optionally delete STS credentials from secure store cache #104
- Add support for Brew #52
v1.2.0 - 2021-10-29
console
command now can use ENV vars via --use-env #41- Fix bugs in
console
with invalid CLI parsing - Tag keys and values are now separate choices #49
- Auto-complete options are now sorted
- Started writing some unit tests
- Do SSO authentication after role selection to improve performance even when we have cached creds
- Add support for
AWS_SSO_PROFILE
env var andProfileFormat
in config #48 - Auto-detect when local cache it out of date and refresh #59
- Add support for
cache
command to force refresh AWS SSO data - Add support for
renew
command to refresh AWS credentials in a shell #63 - Rename
--refresh
flag to be--sts-refresh
- Remove
--force-refresh
flag fromlist
command - Add role metadata when selecting roles #66
v1.1.0 - 2021-08-22
- Move role cache data from SecureStore into json CacheStore #26
exec
command will abort if a conflicting AWS Env var is set #27- Add
time
command to report how much time before the current STS token expires #28 - Add support for printing Arn in
list
#33 - Add
console
support to login to AWS Console with specified role #36 -c
no longer is short flag for--config
v1.0.1 - 2021-07-18
- Add macOS/M1 support
- Improve documentation
- Fix
version
output - Change
exec
prompt to work around go-prompt bug - Typing
exit
now exits without an error - Add help on how to exit via
exit
or ctrl-d
v1.0.0 - 2021-07-15
Initial release