Skip to content

Commit 18467f7

Browse files
authored
PHPLIB-1678: Use assume_role command before accessing secrets (#1832)
1 parent 94b1dd1 commit 18467f7

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.evergreen/config/test-tasks.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,14 @@ tasks:
22
- name: "test-atlas-connectivity"
33
tags: ["atlas", "nodb", "pr", "tag"]
44
commands:
5+
- command: ec2.assume_role
6+
params:
7+
role_arn: ${aws_test_secrets_role}
58
# This creates secrets-export.sh, which is later sourced by run-tests.sh
69
- command: subprocess.exec
710
params:
811
working_dir: "src"
12+
include_expansions_in_env: [AWS_SECRET_ACCESS_KEY, AWS_ACCESS_KEY_ID, AWS_SESSION_TOKEN]
913
binary: bash
1014
args:
1115
- -c

0 commit comments

Comments
 (0)