Truncate usernames getfederationtoken (#145)

* added basic name truncation * clean code * Update pkg/cfaws/assumer_aws_iam.go * added comment Co-authored-by: JoshuaWilkes <[email protected]>
common-fate · Apr 19, 2022 · 8227d34 · 8227d34
1 parent 5a77710
commit 8227d34
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/pkg/cfaws/assumer_aws_iam.go b/pkg/cfaws/assumer_aws_iam.go
@@ -98,7 +98,15 @@ func getFederationToken(ctx context.Context, c *CFSharedConfig) (aws.Credentials
 	}
 
 	client := sts.NewFromConfig(cfg)
-	out, err := client.GetFederationToken(ctx, &sts.GetFederationTokenInput{Name: aws.String("Granted@" + c.Name), Policy: aws.String(allowAllPolicy)})
+	name := "Granted@" + c.Name
+
+	//getfederationtoken fails if name is longer than 32 characters long
+	//truncating the name to 32 characters if its longer than 32
+	if len(name) > 32 {
+		name = name[0:32]
+	}
+	out, err := client.GetFederationToken(ctx, &sts.GetFederationTokenInput{Name: aws.String(name), Policy: aws.String(allowAllPolicy)})
+
 	if err != nil {
 		return aws.Credentials{}, err
 	}