v1.14.2

Changes

Bugs

• Fix console command when accessing China/US Gov #634

Changes

• Now use region/partition specific API Endpoint when retrieving AWS Console URLs from
  IAM Identity Center #634

What's Changed

• update release.md by @synfinatic in #633
• auto close inactive issues & PRs by @synfinatic in #640
• Use a region specific federated url per the AWS docs. by @synfinatic in #635
• release v1.14.2 by @synfinatic in #641

Full Changelog: v1.14.1...v1.14.2

v1.14.1

Note: This is likely the final v1.x release as I start working on v2 which will break CLI command compatibility with v1.

Changes

Bugs

• Fix bug where JsonStore was not being created #612
• Fix fish shell completion
• Do not fall back to interactive prompt when provided CLI args #567

New Features

• Config Wizard now prompts for ProfileFormat #590

Changes

• Documentation is now built via Docker #587
• Improved demos in documentation #551
• Update many dependencies

What's Changed

• sign tags so they are verified by @synfinatic in #582
• Start using mkdocs for managing the documentation by @synfinatic in #583
• fix path to mkdocs src by @synfinatic in #584
• tweak readme by @synfinatic in #585
• session and transitive tags are not applicable to AWS SSO by @synfinatic in #588
• update demos and docs by @synfinatic in #589
• small fix by @synfinatic in #591
• changing mkdocs.yml should update the docs by @synfinatic in #592
• Improve docs by @synfinatic in #593
• fix update docs action by @synfinatic in #594
• bump update docs by @synfinatic in #595
• improve dependabot by @synfinatic in #596
• run workflows when changed by @synfinatic in #608
• Bump ubuntu from 20.04 to 22.04 by @dependabot in #602
• Bump actions/setup-go from 1 to 4 by @dependabot in #604
• Bump actions/checkout from 2 to 4 by @dependabot in #603
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.15 to 1.18.45 by @dependabot in #599
• add ProfileFormat to config wizard by @synfinatic in #607
• Bump gopkg.in/ini.v1 from 1.66.4 to 1.67.0 by @dependabot in #600
• Bump codecov/codecov-action from 2 to 3 by @dependabot in #605
• Bump crazy-max/ghaction-import-gpg from 5.1.0 to 6.0.0 by @dependabot in #606
• udpate changelog by @synfinatic in #609
• Bump github.com/knadh/koanf from 0.16.0 to 1.5.0 by @dependabot in #597
• use variable in workflows for go version by @synfinatic in #615
• Automatically create store.json file for JsonStore by @synfinatic in #613
• replace CodeQL autobuild with manual step by @synfinatic in #621
• Bump github.com/alecthomas/kong from 0.7.1 to 0.8.1 by @dependabot in #620
• Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 by @dependabot in #619
• Bump github.com/aws/aws-sdk-go-v2/service/iam from 1.19.4 to 1.22.7 by @dependabot in #617
• Bump github.com/goccy/go-yaml from 1.9.4 to 1.11.2 by @dependabot in #616
• Fix fish shell completions by @synfinatic in #622
• run workflows on all PR's, not just those off main by @synfinatic in #623
• gh actions need pr types? by @synfinatic in #624
• Bump github.com/stretchr/testify from 1.7.1 to 1.8.4 by @dependabot in #629
• Bump github.com/aws/aws-sdk-go-v2/config from 1.18.45 to 1.19.0 by @dependabot in #627
• Do not fall back to interactive prompt when user provides flags by @synfinatic in #625
• release v1.4.1 by @synfinatic in #631

Full Changelog: v1.14.0...v1.14.1

v1.14.0

Changes

Bugs

• Update net/http to v1.17.0 to fix HTTP/2 server bug CVE-2023-39325

Changes

• Print user code during SSO authentication workflow #572

New Features

• Add --no-cache to console, config-profiles, exec and list #574

What's Changed

• update quickstart docs by @synfinatic in #570
• fix formatting in faq by @synfinatic in #571
• print the user_code during login to verify the code by @PacoVK in #573
• Add --no-cache flag by @synfinatic in #575
• fix managed env vars by @synfinatic in #578
• fix wording of auth code message by @synfinatic in #579
• tag v1.14.0 and tweak verify message by @synfinatic in #581

New Contributors

• @PacoVK made their first contribution in #573

Full Changelog: v1.13.1...v1.14.0

v1.13.1

[v1.13.1] - 2023-08-28

Bugs

• Fix fetching creds from ECS Server #557
• ECS Server now includes RoleArn in output #561
• Fix selection of default browser in advanced guided setup #563

Changes

• ECS Server API is now more RESTful and fully document the API
• Default profile AWS_CONTAINER_CREDENTIALS_FULL_URI is now http://localhost:4144/
• Slotted profile AWS_CONTAINER_CREDENTIALS_FULL_URI is now http://localhost:4144/slot/<profile>
• aws-sso ecs list and aws-sso ecs profile now return the same output format
• make tags now uses gotags

What's Changed

• improve FAQ regarding ProfileFormat by @synfinatic in #554
• broken ecs server stuff. Change the REST API by @synfinatic in #556
• fix get /profile by @synfinatic in #559
• update make tags by @synfinatic in #560
• Include RoleArn and invalid bad routes by @synfinatic in #562
• fix default browser selection in advanced guided setup by @synfinatic in #564
• release 1.13.1 by @synfinatic in #565

Full Changelog: v1.13.0...v1.13.1

v1.13.0

Bugs

• No longer crash during guided setup if user presses <Del> #531
• No longer error out on simple input errors during guided setup
• Do not create invalid maxretry and maxbackoff in SSO Instance during config #536
• Ctrl-C now exits the guided setup
• Running aws-sso config with a missing config file no longer prompts you to back it up #537
• Document ugly fact that AccountAlias is really the AWS Account Name #534
• ecs load now updates history #519
• ECS Server now generates errors per AWS docs

Changes

• Guided setup is now more simple unless user provides the --advanced flag #530
• Guided setup now strips leading and trailing spaces for string input
• Revert #491 so SSO auth uses Firefox containers

New Features

• Added logout command which invalidates the browser session and all credentials #526
• AutoConfigCheck now honors the $AWS_CONFIG_FILE variable #540
• config-profiles now supports the --aws-config flag
• Added ecs list command to list profiles in named slots #517
• Add AuthUrlAction to override UrlAction during SSO Authentication. #524

What's Changed

• improve guided setup wizard by @synfinatic in #532
• Add logout command by @synfinatic in #533
• Do not generate bogus config statements by @synfinatic in #538
• don't prompt to backup missing files by @synfinatic in #539
• AutoConfigCheck now honors AWS_CONFIG_FILE by @synfinatic in #541
• document ugly truth about AccountAlias by @synfinatic in #542
• ecs load now saves to history by @synfinatic in #543
• Add aws-sso ecs list command by @synfinatic in #544
• Add AuthUrlAction to override UrlAction for SSO auth by @synfinatic in #545
• Fix error messages to match AWS API expectations by @synfinatic in #546
• update changelog for v1.13.0 by @synfinatic in #547

Full Changelog: v1.12.0...v1.13.0

v1.12.0

This release adds support for the emulating the AWS ECS Metadata service for exposing IAM role credentials over HTTP and significant improvements for users with many AWS accounts.

Bugs

• Prevent crashing with large number of accounts #520
• console command now always honors the --duration flag

Changes

• CacheRefresh now defaults to 168 hours (7 days)
• FullTextSearch is enabled by default for interactive list mode.
• MaxRetry defaults to 10
• MaxBackoff defaults to 5

New Features

• Add ECS Server mode to support $AWS_CONTAINER_CREDENTIALS_FULL_URI #398
• Add full-text search for interactive list mode #504
• Improve performance refreshing the list of accounts & roles
• Add MaxRetry and MaxBackoff config options

What's Changed

• add release-tag make target by @synfinatic in #510
• Add FullTextSearch by @synfinatic in #512
• update copyright to 2021-2023 by @synfinatic in #514
• Document limitation with ListAccountRoles by @synfinatic in #525
• do not re-auth on backoff by @synfinatic in #522
• Add security.md docs by @synfinatic in #527
• Ecs server by @synfinatic in #513

Full Changelog: v1.11.0...v1.12.0

v1.11.0

Bugs

• Fix list --sort bugs #506
• Fix process --profile flag not working
• Fix AccountId still not zero padding in list output #503
• Invalid fields passed to list command are now detected instead of an empty column

Changes

• No longer show usage on error
• Add AccountIdPad as a new field name for the list command to pad with zeros
  as appropriate.
• Change default ProfileFormat to {{ .AccountIdPad }}:{{ .RoleName }}
• ExpiresStr field name is now Expires to match the header
• Expires is now ExpiresEpoch as both field name and header
• ARN header is now Arn to match the field name
• Add missing AWS Regions & SSO Regions #507

Deprecated

• AccountIdStr function for ProfileFormat. Use the .AccountIdPad variable instead.
• AccountIdStr field is replaced by AccountIdPad in list command and ListFields in config.yaml
• ARN field is replaced by Arn in list command and ListFields in config.yaml
• ExpiresStr field is replaced by Expires in list command and ListFields in config.yaml

What's Changed

• add release-brew make target by @synfinatic in #500
• no usage on error, fix process --profile by @synfinatic in #501
• Leading zero list by @synfinatic in #502
• Increase test coverage to 80% by @synfinatic in #505
• More sorting and list field fixes by @synfinatic in #508
• Add missing AWS regions to predictor by @synfinatic in #509

Full Changelog: v1.10.0...v1.11.0

v1.10.0

Changelog

Bugs

• Fix fish auto-complete helper #472
• Fix issue where we were not appropriately flushing the roles cache #479
• Creds with less than 1min remaining now indicate so via < 1m rather than empty string
• We now consistently use RoleName as both input and output for the list command

Changes

• Authentication via your SSO provider no longer uses a Firefox container #486
• Bump to Go v1.19
• Bump to golangci-lint v1.52.2
• AccountId in the list command output are now presented with a leading zero(s)
• Expired IAM credentials are now explictily marked instead of an empty string

New Features

• Profiles in ~/.aws/config now include the region = XXX option #481
• Add FirstTag support in the config for placing a tag at the top of the select list #445
• Support eval command in Windows PowerShell via Invoke-Expression #188
• Add support for --sort and --reverse flags for the list command #466

What's Changed

• Fix link for use-aws-sso-on-the-cli-for-aws-api-calls by @alezkv in #465
• update golangci-lint action and remove homebrew submodule by @synfinatic in #469
• Add md-links-check workflow by @alezkv in #467
• fix fish auto-complete helper by @synfinatic in #473
• config.md syntax fix by @guildencrantz in #474
• update docs for homebrew by @synfinatic in #470
• add -trimpath to go build by @synfinatic in #476
• update codeql and add badge by @synfinatic in #477
• add dependabot by @synfinatic in #480
• Update docs to clarify AccountName vs AccountAlias by @synfinatic in #485
• add more entries to the FAQ by @synfinatic in #489
• Update FAQ.md by @skx in #490
• SSO authentication no longer uses Firefox containers by @synfinatic in #491
• Profiles in .aws/config now include the region option by @synfinatic in #492
• Flush oudated roles/SSO instances from cache by @synfinatic in #493
• Add support for FirstTag config option by @synfinatic in #494
• Fix windows powershell eval support by @synfinatic in #495
• Allow sorting of roles via an arbitrary field by @synfinatic in #496
• Rename Role to RoleName to match user expierence by @synfinatic in #498
• update windows support info by @synfinatic in #499

New Contributors

• @alezkv made their first contribution in #465
• @guildencrantz made their first contribution in #474
• @skx made their first contribution in #490

Full Changelog: v1.9.10...v1.10.0

v1.9.10

Release to make homebrew-core happy. In theory this will mean you can just brew install aws-sso-cli without a tap and get some not-so magical binaries.

Full Changelog: v1.9.9...v1.9.10

v1.9.9

• Really fix aws-sso version this time :(
• Use the same tests in homebrew in our build pipeline to hopefully prevent this in the future.

What's Changed

• really fix version command this time by @synfinatic in #464

Full Changelog: v1.9.8...v1.9.9