Module: Aws::ASMR::CLI

Defined in:
lib/aws/asmr/cli.rb

Overview

The parts shared by every asmr executable: option parsing, –version / –clear, resolving the role (alias or ARN), and obtaining temporary credentials via assume_role (with MFA prompt and caching).

Each executable is just a thin wrapper that decides what to do with the resolved credentials:

Aws::ASMR::CLI.main(ARGV) do |cache, command_args, options, asmr_alias|
  # ... use cache.shell_variables / build a login URL / etc.
end

Class Method Summary collapse

Class Method Details

.main(argv) ⇒ Object

Parses asmr-level args, handles –version/–clear, resolves credentials and yields (cache, command_args, options, asmr_alias) to the block; the resolved alias is nil when an ARN was given directly. Top-level errors are reported here (with a backtrace under –verbose) and exit non-zero.



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'lib/aws/asmr/cli.rb', line 22

def main(argv)
  asmr_args, command_args = Options.partition(argv)
  options = Options.parse(asmr_args)

  if options[:version]
    require "aws/asmr/version"
    puts VERSION
    exit(0)
  elsif options[:clear]
    Cache.destroy!
    exit(0)
  end

  prompt = Prompt.safe
  begin
    cache, asmr_alias = resolve_credentials(options, prompt)
    yield cache, command_args, options, asmr_alias
  rescue => e
    STDERR.puts e.message
    if options[:verbose]
      STDERR.puts e.backtrace
    else
      STDERR.puts "Add --verbose for more error information."
    end
    exit(1)
  end
end

.resolve_credentials(options, prompt) ⇒ Object

Resolves the role to assume (from –name/-n or an interactive alias selection) and returns [cache, asmr_alias]: a Cache holding temporary credentials (reusing a valid cache entry or performing assume_role with an MFA prompt), and the resolved Alias (nil when an ARN was given directly).



54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
 
# File 'lib/aws/asmr/cli.rb', line 54

def resolve_credentials(options, prompt)
  name = options[:name] || begin
    alias_keys = Alias.base.keys
    if alias_keys.empty?
      STDERR.puts "Please specify --name=ARN to assume_role or make alias at #{ROOT}/alias"
      exit(1)
    end
    prompt.select("Choose a role you're going to assume:", alias_keys)
  end

  asmr_alias = Alias.get(name)
  assume_role_arn = if asmr_alias
    asmr_alias.set_environment_variables!
    asmr_alias.arn
  else
    name
  end

  if cache = Cache.get(assume_role_arn)
    return [cache, asmr_alias]
  end

  serial_number = Aws::ASMR.detect_mfa_device_serial_number
  assume_role_args = asmr_alias ? asmr_alias.assume_role_args : {}
  if serial_number
    token_code = prompt.ask("Type MFA token code:")
    assume_role_args = assume_role_args.merge(serial_number: serial_number, token_code: token_code)
  end

  res = Aws::ASMR.assume_role(assume_role_arn, **assume_role_args)
  cache = Cache.new(**res.credentials.to_h)
  cache.save!(assume_role_arn)
  [cache, asmr_alias]
end