https://github.com/Laica-Lunasys/awsctx

Fast-Switch AWS_PROFILE for saml2aws
https://github.com/Laica-Lunasys/awsctx

Last synced: 24 days ago
JSON representation

Fast-Switch AWS_PROFILE for saml2aws

• Host: GitHub
• URL: https://github.com/Laica-Lunasys/awsctx
• Owner: Laica-Lunasys
• Created: 2021-07-28T04:51:22.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2022-09-13T11:34:59.000Z (about 2 years ago)
• Last Synced: 2024-06-21T12:17:17.994Z (5 months ago)
• Language: Go
• Size: 54.7 KB
• Stars: 5
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
awsctx

===========================

## Setup

Add your `.bashrc` or `.zshrc` and follow "OPTIONAL"

```bash

sync-aws-profile() {

    if [ -e "$AWSCTX/aws_profile" ]; then

        export AWS_PROFILE=$(cat $AWSCTX/aws_profile)

    fi

}

sync-aws-profile

# ---

# Enable tab completion

# zsh:

eval "$(awsctx completion zsh)"

# bash:

eval "$(awsctx completion bash)"

# ---

# ---

# OPTIONAL: Insert MFA Secret

# Uncomment me If you want to use CLI based 2FA

# MFA_TOKEN=$(oathtool -b --totp $AWS_MFA_SECRET)

# alias awsctx='awsctx --mfa=$(oathtool -b --totp $MFA_TOKEN)'

# ---

```

## Usage

```bash

awsctx [completion|help|list|login|show] ...

# List available accounts

awsctx list

# Show current AWS account

awsctx show

# Login

awsctx login myservice-production

# Login with MFA

awsctx login --mfa=123456 myservice-production

# Login and open AWS Management Console (-c, --console)

awsctx login -c myservice-production

# Login and get login URL (-l, --link)

awsctx login -l myservice-production

# Login and open AWS Management Console (with Firefox Multi-Account Containers) (-F, --firefox)

awsctx login -cF myservice-production

```

## Extra: Setup Firefox (Multi-Account Containers)

### Install addons:

Multi-Account Containers:

https://addons.mozilla.org/ja/firefox/addon/multi-account-containers/

Open container tabs from URL (Protocol Handler):

https://addons.mozilla.org/en-US/firefox/addon/open-url-in-container/

## Extra: Setup oathtool (MFA_TOKEN)

### twilio-authy

1. Export TOTP tokens

Get authy-export from: https://github.com/alexzorin/authy

```bash

authy-export

# Enter TOTP backup password

```

2. Copy secret

```

otpauth://totp/~~~:~~~?digits=~&secret=

```

Save to env

```bash

AWS_MFA_SECRET=

```

### Get token from oathtool

1. Install oath-toolkit

```bash

# Ubuntu/Debian

sudo apt install oathtool

# Fedora/RHEL

sudo dnf install oathtool

# macOS

brew install oath-toolkit

```

2. Get TOKEN from SECRET

```bash

oathtool -b --totp $AWS_MFA_SECRET

```