https://github.com/quinnjr/docker-extension-aws
Docker Desktop Extension for managing AWS MFA credentials with automatic session token generation. Seamlessly inject AWS credentials into containers and Docker Compose.
https://github.com/quinnjr/docker-extension-aws
angular aws aws-mfa credentials devops docker docker-compose docker-desktop docker-extension golang mfa session-tokens
Last synced: 2 months ago
JSON representation
Docker Desktop Extension for managing AWS MFA credentials with automatic session token generation. Seamlessly inject AWS credentials into containers and Docker Compose.
- Host: GitHub
- URL: https://github.com/quinnjr/docker-extension-aws
- Owner: quinnjr
- License: mit
- Created: 2026-01-12T21:34:56.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2026-03-23T12:31:23.000Z (3 months ago)
- Last Synced: 2026-03-24T09:59:29.401Z (3 months ago)
- Topics: angular, aws, aws-mfa, credentials, devops, docker, docker-compose, docker-desktop, docker-extension, golang, mfa, session-tokens
- Language: Go
- Size: 466 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# Docker AWS MFA Extension
A Docker Desktop Extension that automatically handles AWS MFA authentication and injects credentials into Docker containers.
## Status
**Stable.** Published on Docker Hub as `quinnjr/docker-aws-mfa`. Supports amd64 and arm64 architectures.
## Tech Stack
| Component | Technology |
|-----------|-----------|
| **Backend** | Go 1.24 (Alpine, static binary) |
| **UI** | Angular 21 (Docker Desktop dashboard tab) |
| **CLI** | Go (cross-compiled for macOS, Linux, Windows) |
| **Build** | Docker multi-stage, buildx multi-arch |
| **Package manager** | pnpm 9 (UI) |
| **License** | MIT |
## Features
- **Visual Dashboard**: Manage AWS MFA credentials directly from Docker Desktop
- **Multi-Profile Support**: Handle multiple AWS profiles with MFA
- **Auto-Expiry Tracking**: See credential expiration status at a glance
- **CLI Integration**: Full CLI tool for terminal workflows
- **Docker Integration**: Inject credentials into `docker run` and `docker compose`
## Installation
### From Docker Desktop Extension Marketplace
Search for "AWS MFA" in the Docker Desktop Extensions marketplace and click Install.
### Manual Installation
```bash
docker extension install quinnjr/docker-aws-mfa:latest
```
### From Source
```bash
git clone https://github.com/quinnjr/docker-plugin-aws.git
cd docker-plugin-aws
make install
```
## Prerequisites
AWS CLI configured with MFA serial in `~/.aws/config`:
```ini
[default]
region = us-west-2
mfa_serial = arn:aws:iam::123456789012:mfa/username
[profile myprofile]
region = us-east-1
mfa_serial = arn:aws:iam::987654321098:mfa/username
```
## Usage
### Docker Desktop UI
1. Open Docker Desktop
2. Click on "AWS MFA" in the left sidebar
3. Select your AWS profile
4. Enter your MFA token code
5. Click "Login with MFA"
Your credentials will be cached and shown in the dashboard.
### CLI Commands
The extension also installs a CLI tool:
```bash
# Authenticate with MFA
docker aws login
docker aws login -p myprofile
# Check status
docker aws status
docker aws status -a # All profiles
# Export credentials
docker aws env -o ./aws.env
eval $(docker aws env --export)
# Run containers with AWS credentials
docker aws run -- -it amazon/aws-cli s3 ls
docker aws run -p myprofile -- myimage:latest
# Docker Compose with credentials
docker aws compose -- up -d
docker aws compose -p myprofile -- logs -f
```
## Development
### Build locally
```bash
make build
make install
```
### Development mode with hot reload
```bash
make dev
```
### View logs
```bash
make logs
```
## Publishing
### To Docker Hub
```bash
make build-cross
make push
```
### To Extension Marketplace
1. Build multi-architecture image: `make build-cross`
2. Push to Docker Hub: `make push`
3. Submit to [Docker Extension Marketplace](https://hub.docker.com/extensions)
## Project Structure
```
docker-plugin-aws/
├── backend/ # Go backend (AWS STS operations)
│ ├── main.go # HTTP handlers + AWS MFA logic
│ ├── proxy.go # Docker VM socket proxy
│ ├── go.mod
│ └── go.sum
├── ui/ # Angular frontend (Docker Desktop tab)
│ └── src/
├── Dockerfile # Multi-stage build (Go + Angular + CLI)
├── docker-compose.yaml # Docker Desktop VM service
├── metadata.json # Extension metadata (UI, VM, CLI binaries)
├── entrypoint.sh # Container entry point
├── Makefile # Build automation
├── install.sh # Local installation script
├── install-remote.sh # Remote installation script
└── screenshots/ # Documentation screenshots
```
## How It Works
1. **Backend**: Go service running in Docker Desktop VM handles AWS STS calls
2. **UI**: React dashboard communicates with backend via Docker Extension API
3. **CLI**: Binary installed on host for terminal workflows
4. **Caching**: Credentials cached in `~/.docker/aws-mfa-cache/` with auto-expiry
## Related Repos
| Repo | Relationship |
|------|-------------|
| `aws-local` | Local AWS service emulator (separate concern -- no MFA needed) |
| `lexmata-infrastructure` | Pulumi AWS infrastructure that requires MFA-authenticated credentials |
## License
MIT License - see [LICENSE](LICENSE)