yawsso 0.1.0

Yet Another AWS SSO - sync up AWS CLI v2 SSO login session to legacy CLI v1 credentials

yawsso

Yet Another AWS SSO - sync up AWS CLI v2 SSO login session to legacy CLI v1 credentials.

This tool is originally based on aws_sso.py script but take different approach and depends only on AWS CLI v2 for get-role-credentials. Well, everything else fail (including boto3, see below) except CLI itself, so...

Prerequisite

• Required AWS CLI v2
• Assume you have already setup AWS SSO for your organization

TL;DR

• Install like so:

pip install yawsso

• Do your per normal login like so:

aws configure sso
aws sso login --profile=dev

• To sync for default profile, just:

yawsso

• To sync for named profile, do:

yawsso -p dev

• Then, continue with your normal tool.

  • i.e. cdk deploy ... or terraform ... or cw ls -p dev groups, so on so ford...

• To print help:

yawsso -h

Why

AWS CLI v2 SSO login cache/store credentials is somewhat different to AWS CLI v1 i.e. no longer in ~/.aws/credentials. There are many SDK and tools still depends on this legacy ~/.aws/credentials format.

• boto3 - https://github.com/boto/boto3/issues/2091
• terraform aws provider - https://github.com/terraform-providers/terraform-provider-aws/issues/10851
• cdk - https://github.com/aws/aws-cdk/issues/5455
• cw - https://github.com/lucagrulla/cw/issues/119
• awsbw - https://github.com/jgolob/awsbw

And, https://github.com/aws/aws-cli/issues/4982 in CLI repo itself!!

Someday, we won't need this anymore. But, until then this tool sync up AWS CLI v2 SSO login session to legacy format auto-magically!!

Others

If this tools is not working for you, try the following:

• https://github.com/benkehoe/aws-sso-credential-process
• https://gist.github.com/sgtoj/af0ed637b1cc7e869b21a62ef56af5ac
• https://github.com/flyinprogrammer/aws-sso-fetcher

Test

• Create virtual environment and then:

pip install '.[test]' .
pytest
python -m unittest

• Create issue or pull request welcome

License

MIT License