Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Manual override the SessionDuration param if "Apply the SessionDuration requested" is set to No #31

Open
nitrocode opened this issue Apr 12, 2019 · 1 comment

Comments

@nitrocode
Copy link

Our AWS has a default of 1 hour session but allows up to 12 hours. The current SessionDuration doesn't seem to collect this maximum of 12 hours, goes to null, and AWS defaults to all generated credentials to one hour.

https://github.com/prolane/samltoawsstskeys/blob/master/background/script.js#L109

It would be nice if when we set Apply the SessionDuration requested to no, an input box could pop up to set an override value or is there a better way to dynamically get the maximum SessionDuration allowed by AWS?

@etendards
Copy link

This is the error when I try to go above 1 hour. I have to set the Extension option to "No" for it to work with Roles that have been set to higher than 1 hour. Since Okta is giving us a Role already, the assume role gets limited to 1 hour for all other roles you assume. But the first role from your IdP can be higher than 1 hour. https://forums.aws.amazon.com/thread.jspa?threadID=242680

"ValidationError: The requested DurationSeconds exceeds the 1 hour session limit for roles assumed by role chaining."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants