aws-role-credentials 0.3.0

Generates AWS credentials for roles using STS

Generates AWS credentials for roles using STS and writes them to `~/.aws/credentials`

Usage

Simply pipe a SAML assertion into awssaml

# create credentials from saml assertion

$ oktaauth -u jobloggs | aws_role_credentials saml –profile dev

Or for assuming a role using an IAM user:

# create credentials from an iam user

$ aws_role_credentials user arn:aws:iam::111111:role/dev jobloggs-session –profile dev

For roles that require MFA:

# create credentials from an iam user with mfa

$ aws_role_credentials user arn:aws:iam::111111:role/dev jobloggs-session –profile dev –mfa-serial-number arn:aws:iam::111111:mfa/Jo –mfa-token 102345

Options

--profile

Use a specific profile in your credential file (e.g. Development). Defaults to sts.

--region

The region to use. Overrides config/env settings. Defaults to us-east-1.

Thanks

Thanks to Quint Van Deman of AWS for demonstrating how to do this. https://blogs.aws.amazon.com/security/post/Tx1LDN0UBGJJ26Q/How-to-Implement-Federated-API-and-CLI-Access-Using-SAML-2-0-and-AD-FS

Authors

• Peter Gillard-Moss

History

0.1.0 (2015-01-11)

• First release on PyPI.