AWS Codewhisperer keeps asking me to sign in again every week

[samdenty]

Problem

I'm trying to use AWS Codewhisperer but it keeps asking me to re-sign in every couple of days / week. Each time I sign in I select 'This is a trusted device', to no avail

Expected behavior

Codewhisperer should stay signed in forever

[QixuanAI]

the same problem, and not only every week, but also every time I open another VS Code window or change another PC.

[justinmk3]

7 days is currently the AWS Builder id service-side limit (except for "Identity Center" SSO which is controlled by your admin).

See also #3248

[samdenty]

Is there any resolution to this? this is probably going to make me uninstall aws codewhisperer even though i like it and use a competitor

[nawlbergs]

can I not use my IAM credentials? its currently using both or something... IAM for all the toolkit explorer and this AWS Builder ID junk for code whisperer...

[justinmk3]

can I not use my IAM credentials?

If the credentials are SSO (IAM Identity Center) credentials, then yes:
https://docs.aws.amazon.com/codewhisperer/latest/userguide/as-whisper-admin.html#codewhisperer-setup-enterprise-admin-authorize

But otherwise, no.

[srinz9]

CodeWhisperer supports (1) BuilderID (Individual tier) and (2) Identity Center (IdC) (Professional tier)
BuilderID has a 7-day expiry and IdC can be configured to upto 7-day session

In the recent extension updates, we fixed cases where logouts happen sooner.

We are also working on extending this - will share an update when ready.

[braincomb]

👍

Using BuilderID and the logouts seem to happen sooner than 7-days.

The whole process is highly inconvenient and 7-days still seems too short. The whole process is like this:

1. Tell extension to reconnect with AWS.
2. Copy code.
3. Go to page and paste code. At this point this should have been the end of it, but no...
4. Go to AWS Builder ID page.
5. Click on "Already have AWS Builder ID. Sign In".
6. Click Next.
7. Finally be able to enter password and Sign In.
8. But wait, have to click Allow again.

What gives?

[soup-bowl]

If the BuilderID timeout is being caused by the source API, or at least another method unrelated to this vscode plugin, could there be a pointer to what issue is tracking it? A 7 day expiry seems to be a security-over-usability design and would like to feedback on that.

[justinmk3]

There is no public tracking issue. We will update here when we have a meaningful update to share.

[justinmk3]

Update: AWS Builder Id session maximum is now 30 days, instead of 7 days.

[justinmk3]

Update:

• Identity Center (IdC, CodeWhisperer "Professional tier") now supports a session maximum of 90 days (configurable by the IdC administrator).
  • This is unrelated to AWS Builder Id, which has a session maximum of 30 days.

[muchisx]

hey @justinmk3 I do not see a setting to change the frequency for the session expiration.

I'm looking in this page and all submenus
https://profile.aws.amazon.com/#/profile/details

Am I looking in the wrong place?

[justinmk3]

@muchisx https://profile.aws.amazon.com/#/profile/details is for AWS Builder Id, which has a max of 30 days, it's not configurable.

IdC (CodeWhisperer "Professional tier") is unrelated to Builder Id.