From c9fb91262d0cbeb6c1ac15f2b74d29bd0bfa8856 Mon Sep 17 00:00:00 2001 From: Mike Mondragon Date: Thu, 25 Jan 2024 10:22:53 -0800 Subject: [PATCH] Yell that m2m is not for human use. --- README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 34bf1c6..9c1519f 100644 --- a/README.md +++ b/README.md @@ -74,7 +74,7 @@ format. | Command | Description | |-----|-----| | `web` | Human oriented retrieval of temporary IAM credentials through Okta authentication and device authorization. Note: if `okta-aws-cli` is not given a command it defaults to this original `web` command. | -| `m2m` | Machine/headless oriented retrieval of temporary IAM credentials through Okta authentication with a private key. | +| `m2m` | Machine/headless oriented retrieval of temporary IAM credentials through Okta authentication with a private key. IMPORTANT! This a not a feature intended for a human use case. Be sure to use industry state of the art secrets management techniques with the private key. | | `debug` | Debug okta.yaml config file and exit. | ## Web Command @@ -194,6 +194,10 @@ they will receive a 403 if they attempt to open the Admin UI. ## M2M Command +***IMPORTANT! This a not a feature intended for a human use case. Be sure to +use industry state of the art secrets management techniques with the private +key.*** + ```shell # This example presumes its arguments are set as environment variables such as # one may find in a headless CI environment.