ryanfrench / aws-auth Goto Github PK

If I run a command aws-role --role-arn [role] aws cloudformation deploy --template foo then the tool will attempt to parse --template foo as a flag for the tool, not for the subsequent command.

To fix this, enforce that the --role-arn, and other flags for the tool, must be provided before the command to run, and anything after the command is ignored and passed directly to the executed command.

Instead of assuming a role each time, check if there is a previously stored session in $HOME/.aws-role/sessions for the arn. If it is still valid, set the environment variables from that session. If it has expired, delete it.

Assume a role and run the supplied command with non-persistent environment variables

This way, we could use this tool as a single tool for authenticating requests that require

1. assuming a role
2. using an MFA device
3. both

Could also rename project to aws-auth once this is completed.

When a role is assumed, save the session details to $HOME/.aws-role/* so they can be read between runs.

Should include details of the role arn, session name, and time of expiration.

If "--persist" is set in the command, export the environment variables to the shell session so that the role is used for all subsequent commands.

Should also allow the utility to be run with "--persist" and no command, to simply assume the role and set the required environment variables