AWS Credential Generator via SSO (IAM Identity Center)

sso_gen will:

• Log you in to SSO (SSO must be set up)
• Create profiles for all accounts you have access to
• Generate temporary credentials for each of those accounts

Before you start

You will need the AWS cli installed, at least version 2.

You can get it from the AWS Documentation.

Setup

• Copy .env.example to .env and edit to add the correct values most importantly:
  • SSO_START_URL=https://d-XXXXXXXXXX.awsapps.com/start
• Copy acct_map.example.json to acct_map.json and give each account an abbreviation for use in a profile name
• Optional: Install the needed python and poetry versions with asdf if they are not in your system path
• Have an existing directory ~/.aws/ in your home directory
• Have the minimum in your ~/.aws/config (TODO: auto-create)

[profile login]
sso_start_url = https://d-XXXXXXXXXX.awsapps.com/start
sso_region = us-east-1

Makefile

Code quality

• format: Format with black and isort
• lint: Run linters
• sec: Scan with basic security tools
• scan: Do a Snyk scan via dockerhub (requires a docker login)

Building

• build: Create a docker image
• binary: Create a binary with pyinstaler

Execution

• run: Run the script from the commandline
• docker-run: Run the docker image

Reference

Special files:

• .isort.cfg - configuration file for isort
• .tool-version - versions of tools for asdf

Poetry configuration:

Force the virtual env to build in the project dir: poetry config virtualenvs.in-project true This avoids system clutter. Be sure the virtual env dir is in .gitignore