@@ -45,7 +45,7 @@ func setupUserInitFlags(flag *pflag.FlagSet) {
45
45
flag .String (AWSAccountIDFlag , "" , "The AWS account ID" )
46
46
flag .String (IAMUserFlag , "" , "The IAM user name to setup" )
47
47
flag .String (IAMRoleFlag , "" , "The IAM role name assigned to the user being setup" )
48
- flag .String (OutputFlag , "json" , "The AWS CLI output format 'text' or 'json' " )
48
+ flag .String (OutputFlag , "json" , "The AWS CLI output format" )
49
49
50
50
// Verbose
51
51
flag .BoolP (VerboseFlag , "v" , false , "log messages at the debug level." )
@@ -171,7 +171,7 @@ func (u *User) newSession() (*session.Session, error) {
171
171
}
172
172
173
173
func (u * User ) newMFASession (logger * log.Logger ) (* session.Session , error ) {
174
- mfaToken := promptMFAtoken ("" , logger )
174
+ mfaToken := promptMFAtoken ("Third " , logger )
175
175
basicSession , err := u .newSession ()
176
176
if err != nil {
177
177
return nil , fmt .Errorf ("unable to create new session: %w" , err )
@@ -254,7 +254,7 @@ func promptMFAtoken(messagePrefix string, logger *log.Logger) string {
254
254
}
255
255
err = validate .Var (t , "numeric,len=6" )
256
256
if err != nil {
257
- fmt .Println ("MFA token must be 6 digits. Please try again." )
257
+ logger .Println ("MFA token must be 6 digits. Please try again." )
258
258
continue
259
259
}
260
260
token = t
@@ -265,7 +265,7 @@ func promptMFAtoken(messagePrefix string, logger *log.Logger) string {
265
265
func getMFATokenPair (logger * log.Logger ) MFATokenPair {
266
266
var mfaTokenPair MFATokenPair
267
267
for attempts := maxMFATokenPromptAttempts ; attempts > 0 ; attempts -- {
268
- fmt .Printf ("Two unique MFA tokens needed to activate MFA device (%d attempts remaining)\n " , attempts )
268
+ logger .Printf ("Two unique MFA tokens needed to activate MFA device (%d attempts remaining)\n " , attempts )
269
269
authToken1 := promptMFAtoken ("First " , logger )
270
270
authToken2 := promptMFAtoken ("Second " , logger )
271
271
@@ -317,6 +317,7 @@ func (u *User) EnableVirtualMFADevice(logger *log.Logger) error {
317
317
func (u * User ) RotateAccessKeys (logger * log.Logger ) error {
318
318
logger .Println ("Rotating AWS access keys" )
319
319
320
+ logger .Println ("A new unique MFA token is needed to rotate the AWS access keys" )
320
321
sess , err := u .newMFASession (logger )
321
322
if err != nil {
322
323
return fmt .Errorf ("unable to get mfa session: %w" , err )
@@ -504,7 +505,7 @@ func openQrCode(tempFile *os.File) error {
504
505
}
505
506
506
507
func checkExistingAWSProfile (profileName string , config * vault.Config , logger * log.Logger ) error {
507
- logger .Println ("Checking whether profile exists in AWS config file" )
508
+ logger .Printf ("Checking whether profile %q exists in AWS config file\n " , profileName )
508
509
_ , exists := config .Profile (profileName )
509
510
if exists {
510
511
return fmt .Errorf ("Profile already exists in AWS config file: %s" , profileName )
0 commit comments