Example of vault-authentication-role used in vault-authentication project

[jeffery]

Hi there,

I am looking for examples of what is in the vault-authentication-role role as per project reference https://github.com/FriendsOfTerraform/vault-authentication

Any tips or documentation would be helpful.

Thanks,
Jeff

[petersin0422]

Hello Jeff,

I am assuming you are referring to this sts_role_arn = "arn:aws:iam::111122223333:role/vault-authentication-role"? This refers to an IAM role that Vault will assume in order to validate authentication requests across AWS accounts. This option is only required in a cross-account authentication scenario. Please check this documentation out for more details.

[jeffery]

Thanks @petersin0422 . Yes it is for cross account authentication scenario. I am having issues getting it to work. Will read up on the documentation and see how I go.

[petersin0422]

Can you post your scenario here? Maybe I can help.

[jeffery]

The problem is when you use MFA + Cross account authentication. This solution works for me https://gist.github.com/Westixy/bc70ee782fe759094bf5c1c65c248f6c