aws-cli-sso

A tool that you can use to SSO via AWS Identity Providers and reload aws session in credentials file.


Keywords
aws, sso, saml, auth, assume, role, sts, idp
License
MIT
Install
pip install aws-cli-sso==0.1.1

Documentation

AWS SAML Login

Works cross platform (Win, Unix, MacOS) Was having a real hard time trying to get cli credentials via SAML SSO so thought about writing this small utility. I can run this daily every morning to get a 12 hour session for myself. Hope you'd find it interesting and useful.

Looking forward to contributions!!

Prerequisites

Need to install

  • Chromedriver ?
  • Google Chrome ?
  • Python 2/3 ?
  • AWS Cli ?

Make sure all the above software are setup properly in PATH environment variable

Executing

Add properties to your AWS credentials file

[some-profile]
saml_sso_url = <url you use for saml, either okta saml or whatever you use>
saml_role_arn = <your iam role to assume>
saml_principal_arn = <your saml idp arn>
saml_duration = <duration of session in seconds, check iam role for maximum value>

Run

python -m aws-saml

Warning: This will change your credentials file. If you don't want to do that, you can use DRY_RUN=Y python -m aws-saml which will only print the values.

Installation

pip install aws-cli-sso

Local development/testing

  • pip install -r requirements.txt
  • python -m aws-saml