{"id":18131661,"url":"https://github.com/mrtc0/aws-sso-go","last_synced_at":"2025-04-15T23:04:16.507Z","repository":{"id":81889712,"uuid":"606096489","full_name":"mrtc0/aws-sso-go","owner":"mrtc0","description":"A utility tool that allows credentials to be saved in 1Password even in an AWS SSO environment","archived":false,"fork":false,"pushed_at":"2025-03-17T12:51:58.000Z","size":133,"stargazers_count":12,"open_issues_count":6,"forks_count":3,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-03-24T04:15:33.897Z","etag":null,"topics":["1password","aws"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mrtc0.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-02-24T15:37:02.000Z","updated_at":"2025-03-10T14:26:28.000Z","dependencies_parsed_at":"2023-03-12T14:16:37.963Z","dependency_job_id":"1eaf9a34-acbc-4dba-abab-3300050eb7c9","html_url":"https://github.com/mrtc0/aws-sso-go","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrtc0%2Faws-sso-go","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrtc0%2Faws-sso-go/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrtc0%2Faws-sso-go/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mrtc0%2Faws-sso-go/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mrtc0","download_url":"https://codeload.github.com/mrtc0/aws-sso-go/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246126958,"owners_count":20727646,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["1password","aws"],"created_at":"2024-11-01T12:08:33.384Z","updated_at":"2025-03-30T18:31:27.500Z","avatar_url":"https://github.com/mrtc0.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# aws-sso-go\n\n[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/mrtc0/aws-sso-go/badge)](https://api.securityscorecards.dev/projects/github.com/mrtc0/aws-sso-go)\n[![CodeQL](https://github.com/mrtc0/aws-sso-go/actions/workflows/codeql.yml/badge.svg)](https://github.com/mrtc0/aws-sso-go/actions/workflows/codeql.yml)\n\n# Motivation\n\n1Password's AWS Shell Plugin is very useful for managing AWS credentials. However, it does not support AWS SSO (`aws sso login`). This project aims to provide a solution to this problem.  \naws-sso-go is output credentials as STDOUT instead of storing them in `~/.aws/sso/cache`. By saving the output to 1Password with a tool like `misc/update-1password-aws-credentials.sh`, you can use `op run --env-file .env` to handle AWS credentials.\n\n# Install\n\n```shell\n$ go install github.com/mrtc0/aws-sso-go@latest\n\n$ cat \u003c\u003cEOF \u003e /usr/local/bin/update-1password-aws-credentials.sh\n#!/bin/bash\n\n# This script is save aws-sso-go results to 1Password.\n#\n# Usage: aws-sso-go | update-1password-aws-credentials.sh \u003c1Password item name\u003e\n#   e.g. aws-sso-go | update-1password-aws-credentials.sh aws-credentials\n#\n# You can handle AWS credentials by running `op run --env-file .env` with a `.env` file like:\n#   AWS_ACCESS_KEY_ID=\"op://Private/aws-credentials/access key id\"\n#   AWS_SECRET_ACCESS_KEY=\"op://Private/aws-credentials/secret access key\"\n#   AWS_SESSION_TOKEN=\"op://Private/aws-credentials/session token\"\n\nwhile read -r line; do\n    AWS_SECRET_ACCESS_KEY=$(echo $line | jq -r '.SecretAccessKey')\n    AWS_ACCESS_KEY_ID=$(echo $line | jq -r '.AccessKeyId')\n    AWS_SESSION_TOKEN=$(echo $line | jq -r '.SessionToken')\n\n    op item edit \"$1\" \"secret access key=$AWS_SECRET_ACCESS_KEY\" \"access key id=$AWS_ACCESS_KEY_ID\" \"session token=$AWS_SESSION_TOKEN\"\ndone\nEOF\n\n$ chmod +x /usr/local/bin/update-1password-aws-credentials.sh\n```\n\n# Usage\n\n```shell\n$ export AWS_REGION=\u003cYOUR SSO Endpoint Region\u003e\n$ aws-sso-go --profile \u003cprofile\u003e | update-1password-aws-credentials.sh \u003c1Password item name\u003e\n$ cat .env\nAWS_ACCESS_KEY_ID=\"op://Private/\u003c1Password item name\u003e/access key id\"\nAWS_SECRET_ACCESS_KEY=\"op://Private/\u003c1Password item name\u003e/secret access key\"\nAWS_SESSION_TOKEN=\"op://Private/\u003c1Password item name\u003e/session token\"\n\n$ op run --env-file .env -- aws s3 ls\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmrtc0%2Faws-sso-go","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmrtc0%2Faws-sso-go","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmrtc0%2Faws-sso-go/lists"}