Switch between temporary AWS SSO credentials of all your AWS accounts using the command-line. Using the official AWS Cli v2, it is required to create a profile for each account, which is not practical if you're working with a big (growing) list of accounts and/or multiple instances of AWS SSO.
- Generates temporary AWS SSO credentials from the commandline
- Configure SSO profiles for jumping between different instances of AWS SSO
- Re-authenticates whenever the access token becomes invalid
- Interactively prompts for Profiles/Accounts/Roles if not supplied through options
- Ability to open web console of selected account
- Node.js v14 or higher
Install with npm:
npm install -g aws-sso-cli
By default, the utility prints out the export
statements for the credentials (similar to the web frontend). If you want to have them exported automatically, you can set up a function in your .bashrc or .zshrc file that can run the export commands like so:
aws-sso-cli() {
command aws-sso-cli "$@" | while read -r line; do
if [[ $line =~ ^export ]]; then
eval $line
fi
done
}
Usage: aws-sso-cli [options]
Commands:
aws-sso-cli add-profile Add a new SSO profile
aws-sso-cli delete-profile Remove an SSO profile
aws-sso-cli list-profiles List all currently configured profiles.
aws-sso-cli Sign in to an AWS account using AWS SSO [default]
Options:
--version Show version number [boolean]
-p, --profile The SSO profile to use. [string]
-a, --account The name of the account you wish to sign into. [string]
-r, --role The role you wish to assume for the specified account. [string]
-f, --force-new-token Force fetch a new access token for AWS SSO. [boolean]
-w, --web Open selected AWS account in your web browser. [boolean]
--help Show help. [boolean]