1

Codefresh takes only 2 params: Access key Secret key

I've got assume role to work on local but it requires aws config file etc

Any ideas how to use assume role to add ecr to docker registry in Codefresh? Or how to get Access key and Secret key from assume role?

Thanks a lot

Sergio13
  • 67
  • 9

1 Answers1

1

Or how to get Access key and Secret key from assume role?

Generally you use STS service for that. The service has assume-role API call. The call:

Returns a set of temporary security credentials that you can use to access AWS resources that you might not normally have access to.

However, the credentials (access key ID, secret access key, and a security token) that you get are temporary. They can last from 15 min to max 12 hours (depending on the role settings).

Marcin
  • 215,873
  • 14
  • 235
  • 294
  • Yeah, I've seen that one. Temporary will not work since we need to integrate it for good – Sergio13 Apr 09 '20 at 00:27
  • 1
    @Sergio13 I see. I think that you should create IAM user, with just the permissions which Codefresh requires. With this, you will have permanent credentials. – Marcin Apr 09 '20 at 00:46
  • 1
    Yeah, I guess it is the only option. Thanks a lot!! – Sergio13 Apr 09 '20 at 18:15