I was trying to find an alternative to aws-sso-creds-helper since it is archived/deprecated.
The "official" AWS solution is not great either (aws sso login --profile <profile_name>
).
My coworkers are using granted.
The installation was simple:
brew tap common-fate/granted
brew install granted
The configuration was all auto generated:
granted sso generate --sso-region ap-southeast-2 https://example.awsapps.com/start
And to use is basically assume <role>
. I can even add it to my existing scripts.
We can also export it to .env file:
assume role-a --env
Plus, we can access different profiles in different browser tabs:
assume -c <role>
Super useful, highly recommended.