in pipeline/iam_generator_deploy.py [0:0]
def build_clients(account_id, name, rolename, region="ca-central-1"):
session = boto3.session.Session()
sts_client = session.client('sts')
response = sts_client.assume_role(
RoleArn="arn:aws:iam::{}:role/{}".format(
account_id,
rolename
),
RoleSessionName=rolename,
DurationSeconds=900,
)
credentials = response['Credentials']
client = session.client(
name,
aws_access_key_id=credentials['AccessKeyId'],
aws_secret_access_key=credentials['SecretAccessKey'],
aws_session_token=credentials['SessionToken'],
region_name=region
)
resource = session.resource(
name,
aws_access_key_id=credentials['AccessKeyId'],
aws_secret_access_key=credentials['SecretAccessKey'],
aws_session_token=credentials['SessionToken'],
region_name=region
)
return(client, resource)