add support for AWS temporary tokens

algo

@@ -242,6 +242,13 @@ Enter your aws_secret_key (http://docs.aws.amazon.com/general/latest/gr/managing
 $ADDITIONAL_PROMPT
 [ABCD...]: " -rs aws_secret_key
 
+#for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+  read -p "
+
+If you are using AWS Temporary Security Credentials (http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html), enter your aws_session_token (aka aws_security_token); otherwise just press ENTER
+$ADDITIONAL_PROMPT
+[ABCD...]: " -rs aws_session_token
+
 read -p "
 
 Name the vpn server:
@@ -287,7 +294,8 @@ Enter the number of your desired region:
   esac
 
   ROLES="ec2 vpn cloud"
-  EXTRA_VARS="aws_access_key=$aws_access_key aws_secret_key=$aws_secret_key aws_server_name=$aws_server_name ssh_public_key=$ssh_public_key region=$region"
+  #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+  EXTRA_VARS="aws_access_key=$aws_access_key aws_secret_key=$aws_secret_key aws_session_token=$aws_session_token aws_server_name=$aws_server_name ssh_public_key=$ssh_public_key region=$region"
 }
 
 gce () {

roles/cloud-ec2/tasks/cloudformation.yml

@@ -9,10 +9,12 @@
   cloudformation:
     aws_access_key: "{{ aws_access_key | default(lookup('env','AWS_ACCESS_KEY_ID'), true)}}"
     aws_secret_key: "{{ aws_secret_key | default(lookup('env','AWS_SECRET_ACCESS_KEY'), true)}}"
+    #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+    security_token: "{{ aws_session_token | default(lookup('env','AWS_SESSION_TOKEN'), true) }}"
     stack_name: "{{ stack_name }}"
     state: "present"
     region: "{{ region }}"
     template: "configs/{{ aws_server_name }}.yml"
     tags:
       Environment: Algo
-  register: stack
+  register: stack

roles/cloud-ec2/tasks/encrypt_image.yml

@@ -2,6 +2,9 @@
   ec2_ami_find:
     aws_access_key: "{{ aws_access_key | default(lookup('env','AWS_ACCESS_KEY_ID'), true)}}"
     aws_secret_key: "{{ aws_secret_key | default(lookup('env','AWS_SECRET_ACCESS_KEY'), true)}}"
+    #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+    #it’s odd that the parameter name (“security_token”) is shown in an error message generated by this ansible     module, rather than being recorded in the module’s official docs
+    security_token: "{{ aws_session_token | default(lookup('env','AWS_SESSION_TOKEN'), true) }}"
     owner: self
     sort: creationDate
     sort_order: descending
@@ -20,6 +23,8 @@
   ec2_ami_copy:
     aws_access_key: "{{ aws_access_key | default(lookup('env','AWS_ACCESS_KEY_ID'), true)}}"
     aws_secret_key: "{{ aws_secret_key | default(lookup('env','AWS_SECRET_ACCESS_KEY'), true)}}"
+    #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+    security_token: "{{ aws_session_token | default(lookup('env','AWS_SESSION_TOKEN'), true) }}"
     encrypted: yes
     name: algo
     kms_key_id: "{{ kms_key_id | default(omit) }}"

roles/cloud-ec2/tasks/main.yml

@@ -2,12 +2,17 @@
     - set_fact:
         access_key: "{{ aws_access_key | default(lookup('env','AWS_ACCESS_KEY_ID'), true) }}"
         secret_key: "{{ aws_secret_key | default(lookup('env','AWS_SECRET_ACCESS_KEY'), true) }}"
+        #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+        security_token: "{{ aws_session_token | default(lookup('env','AWS_SESSION_TOKEN'), true) }}"
         stack_name: "{{ aws_server_name | replace('.', '-') }}"
 
     - name: Locate official AMI for region
       ec2_ami_find:
         aws_access_key: "{{ access_key }}"
         aws_secret_key: "{{ secret_key }}"
+        #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+        #it’s odd that the parameter name (“security_token”) is shown in an error message generated by this ansible module, rather than being recorded in the module’s official docs
+        security_token: "{{ security_token }}"
         name: "ubuntu/images/hvm-ssd/{{ cloud_providers.ec2.image.name }}-amd64-server-*"
         owner: "{{ cloud_providers.ec2.image.owner }}"
         sort: creationDate
@@ -41,6 +46,8 @@
       ec2_remote_facts:
         aws_access_key: "{{ access_key }}"
         aws_secret_key: "{{ secret_key }}"
+        #for AWS's temporary credentials, aws_session_token (aka aws_security_token) is also required
+        security_token: "{{ security_token }}"
         region: "{{ region }}"
         filters:
           instance-state-name: running