ShellTasksAWS account pack template
Account, region and access keys, so tsk exec can run the AWS CLI without a credentials file.
Open in playground
Adds #aws to the browser demo. No account.
Keys
- account_id
- 000000000000
- aws_region
- eu-west-1
- aws_access_key_id
- DEMOACCESSKEYID
- aws_secret_access_key:secret
- (encrypted secret, masked)
- console:url
- https://console.aws.amazon.com
Example values. Rename, add or remove keys after you create the pack.
In a task
rotate #aws.aws_secret_access_key before the audit @fri !1
In the terminal
tsk env aws
ACCOUNT_ID=000000000000
AWS_REGION=eu-west-1
AWS_ACCESS_KEY_ID=DEMOACCESSKEYID
AWS_SECRET_ACCESS_KEY='********'
CONSOLE=https://console.aws.amazon.comThe real tsk decrypts secrets on your machine and prints them.
The AWS CLI reads AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_REGION from the environment. The field names in this template match, so tsk exec hands them to the command and nothing is written to ~/.aws/credentials.
tsk exec aws -- aws s3 ls
tsk exec aws -- aws sts get-caller-identityMake one pack per account or role (aws-prod, aws-sandbox). The secret access key is encrypted on your device before it syncs and decrypted only by tsk on your machine.