You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on May 18, 2021. It is now read-only.
session_ttl is the duration of the STS creds for the initial AssumeRoleWithSAML() call. assume_role_ttl is the duration of the creds for any secondary role that is assumed after the first.
This was very confusing at first. I had assumed session_ttl was the length of the Okta login session or Oka SAML assertion ttl.
Since the tool is only ever assuming 1 final role eventually, I suggest it use the same config parameter for both. For instance, with the change you'd have the following config file:
Running: aws-okta env ttldemo - would provide an STS token with an 8 hour duration aws-okta env ttldemo-role - would provide an STS token with a 1 hour duration
Same parameter used for both, making the UX much less confusing.
For backwards compatibility, we could support assume-role-ttl as a synonym for session-ttl for a few versions.
The text was updated successfully, but these errors were encountered:
Uh oh!
There was an error while loading. Please reload this page.
Forking from Issue #251
session_ttl
is the duration of the STS creds for the initial AssumeRoleWithSAML() call.assume_role_ttl
is the duration of the creds for any secondary role that is assumed after the first.This was very confusing at first. I had assumed session_ttl was the length of the Okta login session or Oka SAML assertion ttl.
Since the tool is only ever assuming 1 final role eventually, I suggest it use the same config parameter for both. For instance, with the change you'd have the following config file:
Running:
aws-okta env ttldemo
- would provide an STS token with an 8 hour durationaws-okta env ttldemo-role
- would provide an STS token with a 1 hour durationSame parameter used for both, making the UX much less confusing.
For backwards compatibility, we could support
assume-role-ttl
as a synonym forsession-ttl
for a few versions.The text was updated successfully, but these errors were encountered: