Support ElasticBeanstalk optional session token

It's used in some authentication scenarios like Amazon AWS-Educate

Author: native-api

lib/dpl/providers/elasticbeanstalk.rb

@@ -28,6 +28,7 @@ class Elasticbeanstalk < Provider
 
       opt '--access_key_id ID', 'AWS Access Key ID', required: true, secret: true
       opt '--secret_access_key KEY', 'AWS Secret Key', required: true, secret: true
+      opt '--session_token TOKEN', 'AWS Session Token', required: false, secret: true
       opt '--region REGION', 'AWS Region the Elastic Beanstalk app is running in', default: 'us-east-1'
       opt '--app NAME', 'Elastic Beanstalk application name', default: :repo_name
       opt '--env NAME', 'Elastic Beanstalk environment name to be updated.'
@@ -41,14 +42,15 @@ class Elasticbeanstalk < Provider
       opt '--debug', internal: true
 
       msgs login:   'Using Access Key: %{access_key_id}',
+           login_token: 'Using Access Key: %{access_key_id}, Session Token: %{session_token}',
            zip_add: 'Adding %s'
 
       msgs clean_description: 'Removed non-printable characters from the version description'
 
       attr_reader :started, :object, :version
 
       def login
-        info :login
+        info(session_token ? :login_token : :login)
       end
 
       def setup
@@ -171,7 +173,7 @@ def environment
       end
 
       def credentials
-        Aws::Credentials.new(access_key_id, secret_access_key)
+        Aws::Credentials.new(access_key_id, secret_access_key, session_token)
       end
 
       def s3

spec/dpl/providers/elasticbeanstalk_spec.rb

@@ -118,6 +118,20 @@
     it { should have_run '[info] Using Access Key: ac******************' }
   end
 
+  describe 'with ~/.aws/credentials', run: false do
+    let(:args) { |e| %w(--env env --bucket_name bucket) }
+
+    file '~/.aws/credentials', <<-str.sub(/^\s*/, '')
+      [default]
+      aws_access_key_id=access_key_id
+      aws_secret_access_key=secret_access_key
+      aws_session_token=token
+    str
+
+    before { subject.run }
+    it { should have_run '[info] Using Access Key: ac******************, Session Token: t*******************' }
+  end
+
   describe 'with ~/.aws/config', run: false do
     let(:args) { |e| %w(--access_key_id id --secret_access_key secret) }