You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -368,6 +371,8 @@ Local use of secrets manager requires:
368
371
369
372
(see instructions in the secrets handling readme).
370
373
374
+
### CSFLE
375
+
371
376
Here's an example usage of the tooling in drivers-evergreen-tools that configures credentials for CSFLE:
372
377
373
378
```bash
@@ -382,6 +387,33 @@ source secrets-export.sh
382
387
> [!IMPORTANT]
383
388
> Make sure `secrets-export.sh` is in the .gitignore of any Github repo you might be using these tools in to avoid leaking credentials. This is already done for this repo.
384
389
390
+
### AWS Profile
391
+
392
+
These instructions will help you locally configure profile-based AWS credentials.
393
+
394
+
Setup an AWS_PROFILE locally to be able to use AWS and to run AWS tests locally.
395
+
396
+
1. Get SSO sign-in info from AWS
397
+
1. Navigate to https://corp.mongodb.com/app/UserHome
398
+
2. Open AWS
399
+
3. Choose `Drivers` account
400
+
4. Choose `drivers-test-secrets-role`
401
+
5. Click `Access Keys`
402
+
6. Copy down `SSO start URL` and `SSO Region`
403
+
2. Sign in locally
404
+
1. Run `aws configure sso-session`
405
+
2. Pick a name, like `drivers-test-secrets-session`
406
+
3. Specify `SSO start URL` and `SSO Region` from earlier steps
407
+
3. Add a profile
408
+
1. Add the following profile to `~/.aws/config`
409
+
410
+
```ini
411
+
[profile drivers-test-secrets-role-857654397073]
412
+
sso_session = drivers-test-secrets-session
413
+
sso_account_id = 857654397073
414
+
sso_role_name = drivers-test-secrets-role
415
+
```
416
+
385
417
## Testing with Special Environments
386
418
387
419
In order to test some features, you will need to generate and set a specialized group of environment variables. The subsections below will walk you through how to generate and set the environment variables for these features.
@@ -647,6 +679,34 @@ Choose your AWS authentication credential type and export the `AWS_CREDENTIAL_TY
647
679
648
680
1. Run the `bash .evergreen/run-mongodb-aws-tests.sh`.
649
681
682
+
An example of performing the above is [`etc/run-aws-integ-tests.sh`](etc/run-aws-integ-tests.sh).
683
+
684
+
#### Running AWS tests
685
+
686
+
Once you have the AWS Profile configured locally (see section "AWS Profile"for more info), you can run tests like this:
0 commit comments