Throw an error if aws session token is detected (#842)

Author: vishalbollu

cli/cmd/lib_aws_creds.go

@@ -113,6 +113,10 @@ func readAWSCredsFromConfigFile(awsCreds *AWSCredentials, path string) error {
 // awsCreds is what was read from the cluster config YAML
 func setInstallAWSCredentials(awsCreds *AWSCredentials) error {
 	// First check env vars
+	if os.Getenv("AWS_SESSION_TOKEN") != "" {
+		fmt.Println("warning: credentials requiring aws session tokens are not supported")
+	}
+
 	if os.Getenv("AWS_ACCESS_KEY_ID") != "" && os.Getenv("AWS_SECRET_ACCESS_KEY") != "" {
 		awsCreds.AWSAccessKeyID = os.Getenv("AWS_ACCESS_KEY_ID")
 		awsCreds.AWSSecretAccessKey = os.Getenv("AWS_SECRET_ACCESS_KEY")

pkg/lib/aws/credentials.go

@@ -17,6 +17,8 @@ limitations under the License.
 package aws
 
 import (
+	"fmt"
+
 	"github.com/aws/aws-sdk-go/aws/credentials"
 )
 
@@ -31,6 +33,10 @@ func GetCredentialsFromCLIConfigFile() (string, string, error) {
 		return "", "", err
 	}
 
+	if value.SessionToken != "" {
+		fmt.Println("warning: credentials requiring aws session tokens are not supported")
+	}
+
 	if value.AccessKeyID == "" || value.SecretAccessKey == "" {
 		return "", "", ErrorReadCredentials()
 	}