Reduce password prompts with macOS KeyChain
Overview
aws-sso
now stores data in a single record in the login
KeyChain on macOS instead of a custom AWSSSOCli
keychain. This has the nice side effect of dramatically reducing the number of password prompts users should experience.
Additionally, we now support limiting History items based on time via the HIstoryMinutes
option. By default, roles will disappear from the History
tag after 24hrs or once you reach HistoryLimit
items- which ever comes first.
Lastly, the console
command no longer supports the --use-sts
flag as it was superfluous. Users wishing to not use the current AWS credentials in their environment should specify --prompt
or the appropriate --arn
or --account
and --role
flags.
What's Changed
- Add a FAQ by @synfinatic in #167
- Switch to a single keyring entry by @synfinatic in #170
- add more unit tests by @synfinatic in #172
- Remove console --use-sts, add --prompt by @synfinatic in #173
- Improve file based keyring by @synfinatic in #174
- Add support for
HistoryMinutes
by @synfinatic in #176
Full Changelog: v1.4.0...v1.5.0