Function AWSConfigFileLoader

internal/aws.go:116–185

(AWSProfile string, version string, AwsMfaToken string)

}

func AWSConfigFileLoader(AWSProfile string, version string, AwsMfaToken string) aws.Config {
	// Loads the AWS config file and returns a config object

	var cfg aws.Config
	var err error
	// cacheKey := fmt.Sprintf("AWSConfigFileLoader-%s", AWSProfile)
	// cached, found := Cache.Get(cacheKey)
	// if found {
	// 	cfg = cached.(aws.Config)
	// 	return cfg
	// }

	// Check if the profile is already in the config map. If not, load it and retrieve the credentials. If it is, return the cached config object
	// The AssumeRoleOptions below are used to pass the MFA token to the AssumeRole call (when applicable)
	if _, ok := ConfigMap[AWSProfile]; !ok {
		// Ensures the profile in the aws config file meets all requirements (valid keys and a region defined). I noticed some calls fail without a default region.
		if AwsMfaToken != "" {
			cfg, err = config.LoadDefaultConfig(context.TODO(), config.WithSharedConfigProfile(AWSProfile), config.WithDefaultRegion("us-east-1"), config.WithRetryer(
				func() aws.Retryer {
					return retry.AddWithMaxAttempts(retry.NewStandard(), 3)
				}), config.WithAssumeRoleCredentialOptions(func(options *stscreds.AssumeRoleOptions) {
				options.TokenProvider = func() (string, error) {
					return AwsMfaToken, nil
				}
			}),
			)
		} else {
			cfg, err = config.LoadDefaultConfig(context.TODO(), config.WithSharedConfigProfile(AWSProfile), config.WithDefaultRegion("us-east-1"), config.WithRetryer(
				func() aws.Retryer {
					return retry.AddWithMaxAttempts(retry.NewStandard(), 3)
				}), config.WithAssumeRoleCredentialOptions(func(options *stscreds.AssumeRoleOptions) {
				options.TokenProvider = stscreds.StdinTokenProvider
			}),
			)
		}

		if err != nil {
			//fmt.Println(err)
			if AWSProfile != "" {
				TxtLog.Println(err)
				fmt.Printf("[%s][%s] The specified profile [%s] does not exist or there was an error loading the credentials.\n", cyan(emoji.Sprintf(":fox:cloudfox v%s :fox:", version)), cyan(AWSProfile), AWSProfile)
				TxtLog.Fatalf("Could not retrieve the specified profile name %s", err)
			} else {
				fmt.Printf("[%s][%s] Error retrieving credentials from environment variables, or the instance metadata service.\n", cyan(emoji.Sprintf(":fox:cloudfox v%s :fox:", version)), cyan(AWSProfile))
				TxtLog.Fatalf("[%s][%s]Error retrieving credentials from environment variables, or the instance metadata service.\n", cyan(emoji.Sprintf(":fox:cloudfox v%s :fox:", version)), cyan(AWSProfile))
			}
			//os.Exit(1)
		}

		_, err := cfg.Credentials.Retrieve(context.TODO())

		if err != nil {
			fmt.Printf("[%s][%s] Error retrieving credentials from environment variables, or the instance metadata service.\n", cyan(emoji.Sprintf(":fox:cloudfox v%s :fox:", version)), cyan(AWSProfile))

		} else {
			// update the config map with the new config for future lookups
			ConfigMap[AWSProfile] = cfg
			//return the config object for this first iteration