https://github.com/webdestroya/aws-sso
Utility to make using AWS SSO a little less annoying
https://github.com/webdestroya/aws-sso
aws aws-sso go golang
Last synced: 3 months ago
JSON representation
Utility to make using AWS SSO a little less annoying
- Host: GitHub
- URL: https://github.com/webdestroya/aws-sso
- Owner: webdestroya
- License: mit
- Created: 2025-02-19T21:09:35.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-03-02T19:31:58.000Z (over 1 year ago)
- Last Synced: 2026-04-06T18:42:12.031Z (3 months ago)
- Topics: aws, aws-sso, go, golang
- Language: Go
- Homepage:
- Size: 117 KB
- Stars: 4
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
Awesome Lists containing this project
README
# aws-sso
Writes credentials to your `~/.aws/credentials` file that were created via SSO configurations. This allows you to run old applications that rely on AccessKey/SecretKey credentials while still allowing you to get those credentials via SSO.
## Installation
```shell
brew install webdestroya/tap/awssso
```
## Usage
> [!WARNING]
> This will be modifying your AWS credentials file. Please create a backup before using this program just in case.
Pull credentials for the listed profiles and update the credentials file
```shell
awssso sync mycompany-staging mycompany-production
```
Detailed help can be viewed by passing `--help` to any command.
## Shell Alternative
You don't even need this program, you can do this entirely within the awscli itself. (Assuming your program can use environment variables instead of aws credentials file.)
```bash
# Login to your profile and get fresh credentials
aws sso login --profile something
# Set the credentials env vars
eval $(aws configure export-credentials --profile something --format env)
# Subsequent AWS commands will use the creds above
aws sts get-caller-identity
```