{"action":"created","issue":{"url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/2985","repository_url":"https://api.github.com/repos/raster-foundry/raster-foundry","labels_url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/2985/labels{/name}","comments_url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/2985/comments","events_url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/2985/events","html_url":"https://github.com/raster-foundry/raster-foundry/issues/2985","id":297122859,"number":2985,"title":"Investigate why download credentials are only valid for 1 hour","user":{"login":"Lknechtli","id":4392704,"avatar_url":"https://avatars2.githubusercontent.com/u/4392704?v=4","gravatar_id":"","url":"https://api.github.com/users/Lknechtli","html_url":"https://github.com/Lknechtli","followers_url":"https://api.github.com/users/Lknechtli/followers","following_url":"https://api.github.com/users/Lknechtli/following{/other_user}","gists_url":"https://api.github.com/users/Lknechtli/gists{/gist_id}","starred_url":"https://api.github.com/users/Lknechtli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Lknechtli/subscriptions","organizations_url":"https://api.github.com/users/Lknechtli/orgs","repos_url":"https://api.github.com/users/Lknechtli/repos","events_url":"https://api.github.com/users/Lknechtli/events{/privacy}","received_events_url":"https://api.github.com/users/Lknechtli/received_events","type":"User","site_admin":false},"labels":[{"id":241545522,"url":"https://api.github.com/repos/raster-foundry/raster-foundry/labels/in%20progress","name":"in progress","color":"c2e0c6","default":false}],"state":"open","locked":false,"assignee":{"login":"Lknechtli","id":4392704,"avatar_url":"https://avatars2.githubusercontent.com/u/4392704?v=4","gravatar_id":"","url":"https://api.github.com/users/Lknechtli","html_url":"https://github.com/Lknechtli","followers_url":"https://api.github.com/users/Lknechtli/followers","following_url":"https://api.github.com/users/Lknechtli/following{/other_user}","gists_url":"https://api.github.com/users/Lknechtli/gists{/gist_id}","starred_url":"https://api.github.com/users/Lknechtli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Lknechtli/subscriptions","organizations_url":"https://api.github.com/users/Lknechtli/orgs","repos_url":"https://api.github.com/users/Lknechtli/repos","events_url":"https://api.github.com/users/Lknechtli/events{/privacy}","received_events_url":"https://api.github.com/users/Lknechtli/received_events","type":"User","site_admin":false},"assignees":[{"login":"Lknechtli","id":4392704,"avatar_url":"https://avatars2.githubusercontent.com/u/4392704?v=4","gravatar_id":"","url":"https://api.github.com/users/Lknechtli","html_url":"https://github.com/Lknechtli","followers_url":"https://api.github.com/users/Lknechtli/followers","following_url":"https://api.github.com/users/Lknechtli/following{/other_user}","gists_url":"https://api.github.com/users/Lknechtli/gists{/gist_id}","starred_url":"https://api.github.com/users/Lknechtli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Lknechtli/subscriptions","organizations_url":"https://api.github.com/users/Lknechtli/orgs","repos_url":"https://api.github.com/users/Lknechtli/repos","events_url":"https://api.github.com/users/Lknechtli/events{/privacy}","received_events_url":"https://api.github.com/users/Lknechtli/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-02-14T14:49:50Z","updated_at":"2018-03-01T20:07:05Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"According to the AWS documentation here: https://docs.aws.amazon.com/AWSJavaSDK/latest/javadoc/com/amazonaws/services/securitytoken/model/GetSessionTokenRequest.html\r\nCredentials timeout should max out at 36 hours, not 1 hour.\r\nThere's a disclaimer that account owners are limited to a maximum of 1 hour. If we're using the root account instead of an IAM role, we should fix it, since that's bad practice anyways."},"comment":{"url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/comments/369714667","html_url":"https://github.com/raster-foundry/raster-foundry/issues/2985#issuecomment-369714667","issue_url":"https://api.github.com/repos/raster-foundry/raster-foundry/issues/2985","id":369714667,"user":{"login":"Lknechtli","id":4392704,"avatar_url":"https://avatars2.githubusercontent.com/u/4392704?v=4","gravatar_id":"","url":"https://api.github.com/users/Lknechtli","html_url":"https://github.com/Lknechtli","followers_url":"https://api.github.com/users/Lknechtli/followers","following_url":"https://api.github.com/users/Lknechtli/following{/other_user}","gists_url":"https://api.github.com/users/Lknechtli/gists{/gist_id}","starred_url":"https://api.github.com/users/Lknechtli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Lknechtli/subscriptions","organizations_url":"https://api.github.com/users/Lknechtli/orgs","repos_url":"https://api.github.com/users/Lknechtli/repos","events_url":"https://api.github.com/users/Lknechtli/events{/privacy}","received_events_url":"https://api.github.com/users/Lknechtli/received_events","type":"User","site_admin":false},"created_at":"2018-03-01T20:07:05Z","updated_at":"2018-03-01T20:07:05Z","author_association":"CONTRIBUTOR","body":"further investigation shows that event thouh GetSessionTokenRequest accepts up to a 36 hour time limit, it's AssumeRoleWithWebIdentityRequest that's timing out: https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html\r\nThis api does does in fact have a maximum of 1 hour."}}
{"actor":{"display_login":"Lknechtli"}}