|
@@ -43,3 +43,33 @@ the current `$AWS_PROFILE`. It uses two variables to control how that is shown:
|
|
|
* ZSH_THEME_AWS_PREFIX: sets the prefix of the AWS_PROFILE. Defaults to `<aws:`.
|
|
|
|
|
|
* ZSH_THEME_AWS_SUFFIX: sets the suffix of the AWS_PROFILE. Defaults to `>`.
|
|
|
+
|
|
|
+## Configuration
|
|
|
+
|
|
|
+[Configuration and credential file settings](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html) by AWS
|
|
|
+
|
|
|
+### Scenario: IAM roles with a source profile and MFA authentication
|
|
|
+
|
|
|
+Source profile credentials in `~/.aws/credentials`:
|
|
|
+
|
|
|
+```
|
|
|
+[source-profile-name]
|
|
|
+aws_access_key_id = ...
|
|
|
+aws_secret_access_key = ...
|
|
|
+```
|
|
|
+
|
|
|
+Role configuration in `~/.aws/config`:
|
|
|
+
|
|
|
+```
|
|
|
+[profile source-profile-name]
|
|
|
+mfa_serial = arn:aws:iam::111111111111:mfa/myuser
|
|
|
+region = us-east-1
|
|
|
+output = json
|
|
|
+
|
|
|
+[profile profile-with-role]
|
|
|
+role_arn = arn:aws:iam::9999999999999:role/myrole
|
|
|
+mfa_serial = arn:aws:iam::111111111111:mfa/myuser
|
|
|
+source_profile = source-profile-name
|
|
|
+region = us-east-1
|
|
|
+output = json
|
|
|
+```
|