AWS Configuration Profiles and assume roles

[cdenneen]

Currently options are assumed role, aws creds file, access/secret keys.
But in the case of something like cross account role you'd have to use profile settings similar to below:

[profile crossaccountrole]
role_arn = arn:aws:iam::123456789012:role/xaccount
source_profile = default
[profile marketingadmin]
role_arn = arn:aws:iam::123456789012:role/marketingadmin
source_profile = default

Is there any undocumented option for this?

[lukewaite]

Does this actually work?

From what I'm seeing it doesn't change to a CredentialFileProvider, it just loads the file and puts the settings into the default config, so role_arn and source_profile would be completely ignored.

https://github.com/logstash-plugins/logstash-mixin-aws/blob/master/lib/logstash/plugin_mixins/aws_config/v2.rb#L51-L58

[morganchristiansson]

role_arn is added in #27 which is yet to be merged