{"action":"created","issue":{"url":"https://api.github.com/repos/aws/aws-sdk-php/issues/1323","repository_url":"https://api.github.com/repos/aws/aws-sdk-php","labels_url":"https://api.github.com/repos/aws/aws-sdk-php/issues/1323/labels{/name}","comments_url":"https://api.github.com/repos/aws/aws-sdk-php/issues/1323/comments","events_url":"https://api.github.com/repos/aws/aws-sdk-php/issues/1323/events","html_url":"https://github.com/aws/aws-sdk-php/issues/1323","id":240947882,"node_id":"MDU6SXNzdWUyNDA5NDc4ODI=","number":1323,"title":"Please add/fix support for assume role CLI profiles in .aws/credentials","user":{"login":"et304383","id":2693414,"node_id":"MDQ6VXNlcjI2OTM0MTQ=","avatar_url":"https://avatars3.githubusercontent.com/u/2693414?v=4","gravatar_id":"","url":"https://api.github.com/users/et304383","html_url":"https://github.com/et304383","followers_url":"https://api.github.com/users/et304383/followers","following_url":"https://api.github.com/users/et304383/following{/other_user}","gists_url":"https://api.github.com/users/et304383/gists{/gist_id}","starred_url":"https://api.github.com/users/et304383/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/et304383/subscriptions","organizations_url":"https://api.github.com/users/et304383/orgs","repos_url":"https://api.github.com/users/et304383/repos","events_url":"https://api.github.com/users/et304383/events{/privacy}","received_events_url":"https://api.github.com/users/et304383/received_events","type":"User","site_admin":false},"labels":[{"id":19969646,"node_id":"MDU6TGFiZWwxOTk2OTY0Ng==","url":"https://api.github.com/repos/aws/aws-sdk-php/labels/feature-request","name":"feature-request","color":"008672","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":18,"created_at":"2017-07-06T12:57:43Z","updated_at":"2018-11-07T07:33:35Z","closed_at":null,"author_association":"NONE","body":"#1030 was closed and appears to remain unresolved as of 3.31.0.\r\n\r\nI expect that if I have this in `.aws/credentials`:\r\n\r\n```\r\n[profile1]\r\noutput = json\r\nregion = us-east-1\r\naws_access_key_id = A**************\r\naws_secret_access_key = *****************\r\n\r\n[profile2]\r\noutput = json\r\nregion = us-east-1\r\nrole_arn = arn:aws:iam::123456789012:role/Developer\r\nsource_profile = profile1\r\n```\r\n\r\nI should be able to simply set the env var:\r\n\r\n```\r\nexport AWS_PROFILE=profile2\r\n```\r\n\r\nAnd then this should work:\r\n```\r\n$ec2_client = new Aws\\Ec2\\Ec2Client([\r\n  'region' => 'us-east-1',\r\n  'version' => 'latest'\r\n]);\r\n```\r\n\r\nThis does not.  As I noted on the other issue, CredentialsProvider is throwing this error:\r\n\r\n```\r\nFatal error: Uncaught Aws\\Exception\\CredentialsException: No credentials present in INI profile 'profile2' (/var/www/.aws/credentials) in /var/www/html/vendor/aws/aws-sdk-php/src/Credentials/CredentialProvider.php:394\r\n```\r\n\r\nThis should work exactly like boto3 and just work.  The SDK should detect that the profile is an assume role type with a role_arn value and perform the assume role call to get credentials.  **I should not have to modify the code to explicitly declare a credentials provider**.\r\n\r\nIf I am simply missing a step please clarify, but I believe code should be agnostic to whether it's running with the env var AWS_PROFILE set or running on EC2."},"comment":{"url":"https://api.github.com/repos/aws/aws-sdk-php/issues/comments/436530885","html_url":"https://github.com/aws/aws-sdk-php/issues/1323#issuecomment-436530885","issue_url":"https://api.github.com/repos/aws/aws-sdk-php/issues/1323","id":436530885,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNjUzMDg4NQ==","user":{"login":"PavloPixart","id":28919577,"node_id":"MDQ6VXNlcjI4OTE5NTc3","avatar_url":"https://avatars3.githubusercontent.com/u/28919577?v=4","gravatar_id":"","url":"https://api.github.com/users/PavloPixart","html_url":"https://github.com/PavloPixart","followers_url":"https://api.github.com/users/PavloPixart/followers","following_url":"https://api.github.com/users/PavloPixart/following{/other_user}","gists_url":"https://api.github.com/users/PavloPixart/gists{/gist_id}","starred_url":"https://api.github.com/users/PavloPixart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PavloPixart/subscriptions","organizations_url":"https://api.github.com/users/PavloPixart/orgs","repos_url":"https://api.github.com/users/PavloPixart/repos","events_url":"https://api.github.com/users/PavloPixart/events{/privacy}","received_events_url":"https://api.github.com/users/PavloPixart/received_events","type":"User","site_admin":false},"created_at":"2018-11-07T07:33:35Z","updated_at":"2018-11-07T07:33:35Z","author_association":"NONE","body":"I think that a minimum deadline should be set. To get our development stage working we have assign all the permission to a non admin account. So the current status isn't secure in any way. Is it possible to have an estimation on the time you will need to fix the bug? Thank you."}}
{"actor":{"display_login":"PavloPixart"}}