{"action":"created","issue":{"url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/171","repository_url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role","labels_url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/171/labels{/name}","comments_url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/171/comments","events_url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/171/events","html_url":"https://github.com/oktadeveloper/okta-aws-cli-assume-role/issues/171","id":348833702,"node_id":"MDU6SXNzdWUzNDg4MzM3MDI=","number":171,"title":"Ability to store password in clear text","user":{"login":"loopingz","id":3437026,"node_id":"MDQ6VXNlcjM0MzcwMjY=","avatar_url":"https://avatars3.githubusercontent.com/u/3437026?v=4","gravatar_id":"","url":"https://api.github.com/users/loopingz","html_url":"https://github.com/loopingz","followers_url":"https://api.github.com/users/loopingz/followers","following_url":"https://api.github.com/users/loopingz/following{/other_user}","gists_url":"https://api.github.com/users/loopingz/gists{/gist_id}","starred_url":"https://api.github.com/users/loopingz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/loopingz/subscriptions","organizations_url":"https://api.github.com/users/loopingz/orgs","repos_url":"https://api.github.com/users/loopingz/repos","events_url":"https://api.github.com/users/loopingz/events{/privacy}","received_events_url":"https://api.github.com/users/loopingz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-08-08T18:07:02Z","updated_at":"2018-08-09T18:46:26Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"I discovered that we can now store password with OKTA_PASSWORD variable.\r\n\r\nI think this defeat the all purpose of using okta-aws for security reason, with that we expose an SSO password which leads to probably other systems.\r\n\r\nI don't think the client should handle that.\r\n\r\nWhat are your opinions?"},"comment":{"url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/comments/411858241","html_url":"https://github.com/oktadeveloper/okta-aws-cli-assume-role/issues/171#issuecomment-411858241","issue_url":"https://api.github.com/repos/oktadeveloper/okta-aws-cli-assume-role/issues/171","id":411858241,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMTg1ODI0MQ==","user":{"login":"AlainODea","id":16341,"node_id":"MDQ6VXNlcjE2MzQx","avatar_url":"https://avatars1.githubusercontent.com/u/16341?v=4","gravatar_id":"","url":"https://api.github.com/users/AlainODea","html_url":"https://github.com/AlainODea","followers_url":"https://api.github.com/users/AlainODea/followers","following_url":"https://api.github.com/users/AlainODea/following{/other_user}","gists_url":"https://api.github.com/users/AlainODea/gists{/gist_id}","starred_url":"https://api.github.com/users/AlainODea/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AlainODea/subscriptions","organizations_url":"https://api.github.com/users/AlainODea/orgs","repos_url":"https://api.github.com/users/AlainODea/repos","events_url":"https://api.github.com/users/AlainODea/events{/privacy}","received_events_url":"https://api.github.com/users/AlainODea/received_events","type":"User","site_admin":false},"created_at":"2018-08-09T18:46:26Z","updated_at":"2018-08-09T18:46:26Z","author_association":"COLLABORATOR","body":"@mmaha that’s a good idea. #128 talks about having a password command or process and #59 talks about being a process of that kind for boto3 and AWS CLI clients.\r\n\r\nI think it is a good idea.\r\n\r\naws-vault solves a different, but very significant problem of leaking AWS credentials (even temporary ones like this tool generates) in plaintext to disk.\r\n\r\nI think it would be interesting to see how this tool could be integrated with aws-vault. Its approach appears to be quite clever and universal."}}
{"actor":{"display_login":"AlainODea"}}