GHA: Debug akamai setup script

This commit is contained in:
aboyko
2023-11-08 19:45:28 -05:00
parent 27fa449db1
commit dfeeaa2c21
3 changed files with 40 additions and 3 deletions

View File

@@ -1,6 +1,8 @@
# Akamai supports assumeRole for Cloudgate S3 access
# The script asks for temp credentials to be able to upload to Akamai S3 origin bucket
# The AWS CLI environment variables are then updated with temp credentials values
set -e
session_name=$1
duration_seconds=900
if [ ! -z "$2" ]; then
@@ -9,7 +11,7 @@ fi
export $(printf "AWS_ACCESS_KEY_ID=%s AWS_SECRET_ACCESS_KEY=%s AWS_SESSION_TOKEN=%s" \
$(aws sts assume-role \
--role-arn "arn:aws:iam::${TOOLS_CLOUDGATE_ACCOUNT_ID}:role/${TOOLS_CLOUDGATE_USER}" \
--role-arn arn:aws:iam::$TOOLS_CLOUDGATE_ACCOUNT_ID:role/$TOOLS_CLOUDGATE_USER \
--role-session-name $session_name \
--duration-seconds $duration_seconds \
--query "Credentials.[AccessKeyId,SecretAccessKey,SessionToken]" \