Skip to content

Latest commit

 

History

History
18 lines (15 loc) · 1.18 KB

README.md

File metadata and controls

18 lines (15 loc) · 1.18 KB
Raw

This script makes it easier to switch between multiple AWS accounts that require MFA authentication when using the AWS CLI.

Steps:

  • Install jq if you don't already have it
  • Put your Named AWS Profile(s) in place with AWS API credentials having sufficient permissions to interact with AWS STS (note: use underscores instead of dashes in your profile names)
  • copy aws_cli_mfa_auth.sh in your working directory
  • setup aws_mfa_accounts.json in your working directory, with the following structure, filling out details for each mfa account you wish to access:
{
  "aws_cli_profile_name": "arn:aws:iam::12345:mfa/username"
}

Note - each key must be the same name as an existing profile in your .aws/credentials file. This script currently does not support dashes in the profile name, so snake or camel case is required.

  • open your MFA device to get the MFA code
  • source aws_cli_mfa_auth.sh <profile> <MFA Code> # use source instead of executing it directly since it exports environmental variables
  • confirm successful authentication by running aws sts get-caller-identity