jumpcloud-awscli 0.2.0

JumpCloud AWS CLI Authentication with Device Trust

JumpCloud AWS CLI Authentication Utility

A Python utility for authenticating with AWS CLI using JumpCloud SAML and Device Trust certificates.

Features

• Browser-based authentication with JumpCloud
• Automatic Device Trust certificate handling
• SAML assertion capture and parsing
• AWS STS role assumption
• AWS CLI credential configuration
• Cross-platform (works on macOS, Windows, and Linux)
• Built-in ChromeDriver management support

Installation

Basic Installation

pip install jumpcloud-awscli

Installation with Automatic WebDriver Management

pip install jumpcloud-awscli[auto-webdriver]

Requirements

• Python 3.6+
• Chrome or Chromium browser

The package will use ChromeDriver in one of these ways:

1. System-installed ChromeDriver (if available in your PATH)
2. Automatic download via webdriver-manager (if you installed with [auto-webdriver])

Usage

Basic Usage

# Authenticate with JumpCloud and update AWS credentials
jumpcloud-awscli login --url "https://sso.jumpcloud.com/saml2/yourapp"

All Options

jumpcloud-awscli login --url "https://sso.jumpcloud.com/saml2/yourapp" \
                 --profile "jumpcloud" \
                 --duration 43200 \
                 --region "us-west-2" \
                 --debug

Using Environment Variables

You can set the JumpCloud URL as an environment variable:

# Set the environment variable
export JUMPCLOUD_AWS_URL="https://sso.jumpcloud.com/saml2/yourapp"

# Then you can run without the --url parameter
jumpcloud-awscli login

Help Information

# Show help for all commands
jumpcloud-awscli --help

# Show help for the login command
jumpcloud-awscli login --help

How It Works

1. Launches a Chrome browser session to authenticate with JumpCloud
2. The browser automatically presents your Device Trust certificate during authentication
3. After successful authentication, it captures the SAML assertion
4. Parses the SAML assertion to extract available AWS roles
5. Lets you select a role (if multiple are available)
6. Uses AWS STS to assume the selected role with the SAML assertion
7. Updates your AWS CLI credentials file with temporary credentials

Troubleshooting

Chrome/ChromeDriver Issues

If you encounter issues with Chrome or ChromeDriver:

1. First, try installing the package with automatic WebDriver management:

   pip install jumpcloud-awscli[auto-webdriver]
   

2. If that doesn't work, you can install ChromeDriver manually:

   For macOS:

   brew install --cask chromedriver
   xattr -d com.apple.quarantine $(which chromedriver)
   

   For Windows: Download from ChromeDriver website and add to PATH

   For Linux:

   # Debian/Ubuntu
   sudo apt-get install chromium-chromedriver
   
   # CentOS/RHEL
   sudo yum install chromedriver
   

Debug Mode

For more detailed output, use the --debug flag:

jumpcloud-awscli login --url "https://sso.jumpcloud.com/saml2/yourapp" --debug

macOS SSL Certificate Issues

If you encounter SSL certificate errors on macOS:

# Fix SSL certificates
/Applications/Python*/Install\ Certificates.command

Common Issues

• Certificate selection problems: If prompted for a certificate and it fails, check that your JumpCloud Device Trust certificate is properly installed.
• Authentication timeouts: If the process times out during authentication, check your network connection and ensure you're using the correct JumpCloud credentials.
• No roles found: Verify that your JumpCloud user has the proper AWS application role assignments.

License

MIT License