rapid7 / awsaml / 120

91%

master: 91%

push

travis-ci

Refresh credentials every half-duration

By default, credentials last an hour.  Previously, awsaml would refresh
the credentials every hour minus ten seconds.  This leaves the potential
of a long-running command picking up those credentials right before they
expire, and them expiring partway through running the command, and the
command failing.  Terraform is one such example.

This change will refresh the credentials every half hour.  This *should*
guarantee that whenever a command is run, it has at least a half hour of
useful life on the credential that it picks up from the credentials
file.

A bug still exists:  The timer starts from the time awsaml launches, not
from the time a user logs in.  This is okay, because it should still
guarantee more frequent updates than necessary to retain valid and
recent credentials.

21 of 23 branches covered (91.3%)

29 of 32 relevant lines covered (90.63%)

6.28 hits per line