{"action":"created","issue":{"url":"https://api.github.com/repos/dtan4/terraforming/issues/280","repository_url":"https://api.github.com/repos/dtan4/terraforming","labels_url":"https://api.github.com/repos/dtan4/terraforming/issues/280/labels{/name}","comments_url":"https://api.github.com/repos/dtan4/terraforming/issues/280/comments","events_url":"https://api.github.com/repos/dtan4/terraforming/issues/280/events","html_url":"https://github.com/dtan4/terraforming/issues/280","id":183926596,"number":280,"title":"Add Assume Role functionality","user":{"login":"gstlt","id":1674022,"avatar_url":"https://avatars.githubusercontent.com/u/1674022?v=3","gravatar_id":"","url":"https://api.github.com/users/gstlt","html_url":"https://github.com/gstlt","followers_url":"https://api.github.com/users/gstlt/followers","following_url":"https://api.github.com/users/gstlt/following{/other_user}","gists_url":"https://api.github.com/users/gstlt/gists{/gist_id}","starred_url":"https://api.github.com/users/gstlt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gstlt/subscriptions","organizations_url":"https://api.github.com/users/gstlt/orgs","repos_url":"https://api.github.com/users/gstlt/repos","events_url":"https://api.github.com/users/gstlt/events{/privacy}","received_events_url":"https://api.github.com/users/gstlt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-10-19T10:42:09Z","updated_at":"2016-10-19T17:06:01Z","closed_at":null,"body":"Sample configuration .aws/credentials:\r\n```\r\n[default]\r\naws_access_key_id = *THEKEY*\r\naws_secret_access_key = *THESECRET*\r\naws_session_token = *AWS_SESSION_TOKEN*\r\n\r\n[assume_admin_role]\r\nsource_profile = default\r\nrole_arn = arn:aws:iam::123456789012:role/SomeAdminRole\r\n```\r\n\r\nError I'm getting:\r\n```\r\n$ terraforming iamg --profile=default --region=eu-west-1\r\n/home/gstlt/.rbenv/vers`ions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/request_signer.rb:100:in `require_credentials': unable to sign request without credentials set (Aws::Errors::MissingCredentialsError)\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/request_signer.rb:90:in `sign_authenticated_requests'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/request_signer.rb:83:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/helpful_socket_errors.rb:10:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/retry_errors.rb:87:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/query/handler.rb:27:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/user_agent.rb:12:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/plugins/endpoint.rb:41:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/param_validator.rb:21:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/plugins/raise_response_errors.rb:14:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/param_converter.rb:20:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/response_paging.rb:26:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/plugins/response_target.rb:21:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/request.rb:70:in `send_request'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/base.rb:207:in `block (2 levels) in define_operation_methods'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:46:in `iam_groups'\r\n\tfrom (erb):1:in `apply_template'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/2.3.0/erb.rb:864:in `eval'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/2.3.0/erb.rb:864:in `result'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/util.rb:4:in `apply_template'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:19:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:7:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:215:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:202:in `execute'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:59:in `iamg'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/command.rb:27:in `run'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/invocation.rb:126:in `invoke_command'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor.rb:359:in `dispatch'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/base.rb:440:in `start'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/bin/terraforming:5:in `<top (required)>'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/bin/terraforming:23:in `load'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/bin/terraforming:23:in `<main>'\r\n\r\n```\r\n\r\nAfter moving role to [default] profile:\r\n```\r\n$ terraforming iamg --profile=default --region=eu-west-1\r\n/home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/plugins/raise_response_errors.rb:15:in `call': User: arn:aws:iam::123456789012:user/login.name is not authorized to perform: iam:ListGroups on resource: arn:aws:iam::123456789012:group/ (Aws::IAM::Errors::AccessDenied)\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/param_converter.rb:20:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/aws-sdk-core/plugins/response_paging.rb:26:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/plugins/response_target.rb:21:in `call'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/request.rb:70:in `send_request'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/aws-sdk-core-2.5.11/lib/seahorse/client/base.rb:207:in `block (2 levels) in define_operation_methods'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:46:in `iam_groups'\r\n\tfrom (erb):1:in `apply_template'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/2.3.0/erb.rb:864:in `eval'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/2.3.0/erb.rb:864:in `result'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/util.rb:4:in `apply_template'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:19:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/resource/iam_group.rb:7:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:215:in `tf'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:202:in `execute'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/lib/terraforming/cli.rb:59:in `iamg'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/command.rb:27:in `run'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/invocation.rb:126:in `invoke_command'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor.rb:359:in `dispatch'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/thor-0.19.1/lib/thor/base.rb:440:in `start'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/lib/ruby/gems/2.3.0/gems/terraforming-0.10.0/bin/terraforming:5:in `<top (required)>'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/bin/terraforming:23:in `load'\r\n\tfrom /home/gstlt/.rbenv/versions/2.3.1/bin/terraforming:23:in `<main>'\r\n```\r\n\r\nAm I missing something or Assume Role is not working right now?\r\n\r\nThanks!"},"comment":{"url":"https://api.github.com/repos/dtan4/terraforming/issues/comments/254877046","html_url":"https://github.com/dtan4/terraforming/issues/280#issuecomment-254877046","issue_url":"https://api.github.com/repos/dtan4/terraforming/issues/280","id":254877046,"user":{"login":"gstlt","id":1674022,"avatar_url":"https://avatars.githubusercontent.com/u/1674022?v=3","gravatar_id":"","url":"https://api.github.com/users/gstlt","html_url":"https://github.com/gstlt","followers_url":"https://api.github.com/users/gstlt/followers","following_url":"https://api.github.com/users/gstlt/following{/other_user}","gists_url":"https://api.github.com/users/gstlt/gists{/gist_id}","starred_url":"https://api.github.com/users/gstlt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gstlt/subscriptions","organizations_url":"https://api.github.com/users/gstlt/orgs","repos_url":"https://api.github.com/users/gstlt/repos","events_url":"https://api.github.com/users/gstlt/events{/privacy}","received_events_url":"https://api.github.com/users/gstlt/received_events","type":"User","site_admin":false},"created_at":"2016-10-19T17:06:01Z","updated_at":"2016-10-19T17:06:01Z","body":"So I've updated description. It's not a PEBKAC, MFA+assume role works fine for AWS CLI."}}
{"actor":{"display_login":"gstlt"}}