Support for aws-vault exec --server on WSL #1200
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Currently when running on WSL the only supported prompt driver is terminal.
Terminal prompt is not compatible with the server mode making it very hard to develop apps in WSL that need to talk to aws.
To workaround the issue we run credentials server on windows host and take advantage of windows cred storage and UX
On WSL linux we run proxy command that talks to the credentials server running on host Because we don't need to run proxy on the windows host we made it optional If proxy is disabled we would not need privilege elevation
On windows:
On linux:
After that all linux processes will be authenticate through windows host
Security implications:
We only bind to WSL host ip and only accept connections from ips that belong to the WSL network.
Open questions: