Note: This fork exists because I did not like the format of the profile names generated by the sso profile tool.
See branch feature/betterprofilenames
The AWS SSO Profile Tool is a script that helps create profiles for all the accounts/roles you have access to as an AWS SSO user. These profiles can then be used by AWS CLI v2 to get access to your AWS accounts using short-lived credentials.
The AWS SSO Profile Tool differs from AWS CLI v2's aws configure sso in that it gives
you the ability to create all possible profiles in one go. Think of it as aws configure sso on steroids.
When you run the tool, you will be asked to log into AWS SSO using your browser. Once you login, the tool will walk through each account/role pair, giving you an opportunity to create a profile if desired. You can also have the tool create profiles for all account/role pairs using default information. The profiles will be appended to the file you provide as an argument or your default config file if no file name is provided.
Once these profiles are created, you can use them by specifying the profile name
as an argument to the '--profile' command line option (e.g., aws s3 ls --profile my_profile).
Note: You will always have to login to AWS SSO using the aws sso login
command before you can use any AWS SSO profile. However, once you have logged
in once, you will be able to use any of the created profiles until your
authorization token expires.
To install the tool, follow these steps:
- Download the awsssoprofiletool.sh script onto your machine, using one of the following methods:
- Clone the repository
- Download the ZIP file and unzip
- Copy and paste the script into a file
- (Optional) Mark the awsssoprofiletool.sh script as executable using
chmod +x awsssoprofiletool.sh
To run the script, do one of the following:
- If the script is executable, run it with
./awsssoprofiletool.sh <region> <start_url> [<profile_file>] - If the script is not executable, run it with
bash awsssoprofiletool.sh <region> <start_url> [<profile_file>]
The arguments are as follows:
- <region> - the region where AWS SSO is running
- <start_url> - the start URL from the AWS SSO page
- <profile_file> - where the profiles will be created; defaults to ~/.aws/config
See CONTRIBUTING for more information.
This code is licensed under the MIT-0 License. See the LICENSE file.