Merge pull request #276 from exosite/master

Add --role-arn support

README.md

@@ -46,6 +46,16 @@ You can switch between different sets in the credentials file by passing
 
         cli53 list --profile my_profile
 
+You can also assume a specific role by passing `--role-arn` to any command.
+For example:
+
+        cli53 list --role-arn arn:aws:iam::123456789012:role/myRole
+
+You can combine role with profile.
+For example:
+
+        cli53 list --profile my_profile --role-arn arn:aws:iam::123456789012:role/myRole
+
 For more information, see: http://blogs.aws.amazon.com/security/post/Tx3D6U6WSFGOK2H/A-New-and-Standardized-Way-to-Manage-Credentials-in-the-AWS-SDKs
 
 Note: for Alpine on Docker, the pre-built binaries do not work, so either use Debian, or follow the instructions below for Building from source.

main.go

@@ -27,6 +27,10 @@ func Main(args []string) int {
 			Name:  "profile",
 			Usage: "profile to use from credentials file",
 		},
+		cli.StringFlag{
+			Name:  "role-arn",
+			Usage: "AWS role ARN to assume",
+		},
 		cli.StringFlag{
 			Name:  "endpoint-url",
 			Usage: "override Route53 endpoint (hostname or fully qualified URI)",

util.go

@@ -15,6 +15,7 @@ import (
 
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/aws/awserr"
+	"github.com/aws/aws-sdk-go/aws/credentials/stscreds"
 	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/aws/aws-sdk-go/service/route53"
 )
@@ -70,6 +71,14 @@ func getService(c *cli.Context) (*route53.Route53, error) {
 	if err != nil {
 		return nil, err
 	}
+	roleARN := c.String("role-arn")
+	if roleARN != "" {
+		roleCreds := stscreds.NewCredentials(sess, roleARN)
+		if err != nil {
+			return nil, err
+		}
+		config.Credentials = roleCreds
+	}
 	return route53.New(sess, config), nil
 }