aws-sso

Python AWS SSO login helper.

This is a simple python package that will log into AWS SSO (using the AWS CLI and configured profiles) and then set environmental variables for the AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY/AWS_SESSION_TOKEN within that terminal. This make it easy to get credentials into the console without the need to constantly revisit the SSO login page and manual copy/paste credentials. This in conjunction with zshrc/bashrc allows for easy authentication anywhere. This does rely on you having the appropriate settings within "~/.aws/config", there is an example below along with an example of a function to put within zshrc/bashrc.

You will need to install this module locally using setup tools.

Example SSO configuration in "~/.aws/config"

[default]
region = eu-west-1
output = json
[profile ssoprofile]
sso_start_url = https://ssologinpage.awsapps.com/start
sso_region = eu-west-1
sso_account_id = 123456789123
sso_role_name = role_name
region = eu-west-1
output = json

Example zshrc/bashrc configuration

sso(){
    value=`python3 -m aws-sso -p $1`
    account_id=`echo $value | jq .account_id | sed -e 's/^"//' -e 's/"$//'`
    role_name=`echo $value | jq .role_name | sed -e 's/^"//' -e 's/"$//'`
    
    access_key_id=`echo $value | jq .accessKeyId | sed -e 's/^"//' -e 's/"$//'`
    secret_access_key=`echo $value | jq .secretAccessKey | sed -e 's/^"//' -e 's/"$//'`
    session_token=`echo $value | jq .sessionToken | sed -e 's/^"//' -e 's/"$//'`

    expiration=`echo $value | jq .expiration | sed -e 's/^"//' -e 's/"$//'`
    tput setaf 2
    
    echo "Account ID: $account_id"
    echo "Role Name:  $role_name"
    echo "Access Key: $access_key_id"
    echo "Expiration: $expiration"

    export AWS_ACCESS_KEY_ID=`echo $access_key_id`
    export AWS_SECRET_ACCESS_KEY=`echo $secret_access_key`
    export AWS_SESSION_TOKEN=`echo $session_token`
}

davidhubbell/aws-sso

aws-sso