Turn your Okta identity into AWS credentials on the command line.

• Installation
• Usage
• Configuration
• Goals

Install credz using Homebrew.

brew tap ryangraham/credz
brew install credz
credz -v

warning: this is alpha software and it will overwrite your ~/.aws/credentials file. I recommend taking a manual backup beforehand.

First run credz to populate a profile named test.

credz -p test

The first time you run credz you will be prompted for three things. This information will be cached for subsequent runs.

1. Okta Organization (If your Okta URL is https://scooterz.okta.com, then your Okta organization will be scooterz)
2. Okta Username
3. Okta Password

Next test out your new profile with AWS CLI.

aws sts get-caller-identity --profile test

credz will generate the default config file for you. (~/.credz)

[Okta]
organization = mycompany
username = ryang
enable_keychain = true

Use the -c flag to specify an alternate config file.

credz -c other.cfg -p tao

I started this project because I got frustrated trying to install the popular java CLI on Catalina. I pivoted to a few different python competitors and quickly ran into bugs I didn't want to fix. So I'd like to make this easier, but only time will tell. Please file issues as you run across them. 🍺