AWS Credential Process
Project description
Description
Script to use as credential_process
for the AWS CLI (including boto3), it caches your MFA session in a keyring and uses an Yubi key to authenticate.
Installing
You can install aws-credential-process using pip:
pip install aws_credential_process
I recommend to install aws-credential-process in a virtualenv:
virtualenv ~/venv/aws_credential_process
~/venv/aws_credential_process/bin/pip install aws_credential_process
After the above commands you should be able to run ~/venv/aws_credential_process/bin/aws-credential-process
Usage
You can use the following arguments to start aws-credential-process:
Usage: aws-credential-process [OPTIONS]
Get output suitable for aws credential process
Options:
--access-key-id TEXT
--secret-access-key TEXT
--mfa-oath-slot TEXT [required]
--mfa-serial-number TEXT [required]
--mfa-session-duration INTEGER
--assume-session-duration INTEGER
--assume-role-arn TEXT
--force-renew
--credentials-section TEXT
--help Show this message and exit.
aws-credential-process is meant to be used as credential_process
in your .aws/config
file. For example:
[profile yourprofile]
credential_process = /home/user/venv/aws_credential_process/bin/aws-credential-process --oath-slot "Amazon Web Services:test@example.com" --serial-number arn:aws:iam::123456789012:mfa/john.doe --role-arn arn:aws:iam::123456789012:role/YourRole
If you've supplied the secret-access-key once you can omit it with the next call, it will be cached in your keyring.
When you don't supply the access-key-id it will be loaded from ~/.aws/credentials
. You can use another section than "default" by using the credentials-section argument.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for aws-credential-process-0.1.4.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 0e880f637b1041f6dae00c71b16dbef09ddda608079e0f2df8f58d6168198a6e |
|
MD5 | b521f80d5c1b08ddc4a80f2f4d565f64 |
|
BLAKE2b-256 | 9c2ce0bb4254e8b4fd92647b4562a5d60439e3cd390b670075dc6aba7269f61b |
Hashes for aws_credential_process-0.1.4-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 5a4231e9a45318f9ccdb65ac14f12b10faaaba4c324a15950f2edddc727877ad |
|
MD5 | c56d0e8aeff84a76b1cadcacbb1e82d1 |
|
BLAKE2b-256 | cf8a7f9edaa397a12226fc55cf9ae26d9301e2c609d355fc71b39c55138a43c3 |