Get AWS credentials from a profile to inject into other programs
Project description
aws-export-credentials
Get AWS credentials from a profile to inject into other programs
There are a number of other projects that extract AWS credentials and/or inject them into programs, but all the ones I've seen use the CLI's cache files directly, rather than leveraging botocore's ability to retrieve and refresh credentials. So I wrote this to do that.
botocore (the underlying Python SDK library) has added support for loading credentials cached by aws sso login
as of version 1.17.0.
aws-export-credentials
now requires botocore >= 1.17.0, and so supports AWS SSO credentials as well.
If all you want is AWS SSO support for an SDK other than Python, take a look at aws-sso-credential-process, which doesn't require the credential injection process that aws-export-credentials
does.
Quickstart
I recommend you install pipx
, which installs the tool in an isolated virtualenv while linking the script you need.
# with pipx
pipx install aws-export-credentials
# without pipx
python3 -m pip install --user aws-export-credentials
# run it
aws-export-credentials
{
"Version": 1,
"AccessKeyId": "<your access key here>",
"SecretAccessKey": "<shhh it's your secret key>",
"SessionToken": "<do you ever wonder what's inside the session token?>"
}
Usage
Profile
Profiles work like in the AWS CLI (since it uses botocore); it will pick up the AWS_PROFILE
or AWS_DEFAULT_PROFILE
env vars, but the --profile
argument takes precedence.
JSON
aws-export-credentials --profile my-profile --json [--pretty]
Print the credentials to stdout as a JSON object compatible with the credential_process
spec. If --pretty
is added, it'll be pretty-printed.
Env vars
aws-export-credentials --profile my-profile --env
eval $(aws-export-credentials --profile my-profile --env-export)
Print the credentials as environment variables. With --env-export
, the lines are prefixed
by "export
", suitable for eval-ing into your shell.
Exec wrapper
aws-export-credentials --profile my-profile --exec echo 'my access key id is $AWS_ACCESS_KEY_ID'
Execute the arguments after --exec
using os.system()
, injecting the credentials through
environment variables.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for aws-export-credentials-0.4.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | fc2279ff4f5c66ffd9f1cce08df242ccc8bbd36bd701738e368e7268f0085fe0 |
|
MD5 | b07bc29aa5f4f476c039c4b70bcadfbc |
|
BLAKE2b-256 | 80ca5d62af1e5d4c516853bcc4d55df5ff9665315a8bce11fa0f64ffd51be4eb |
Hashes for aws_export_credentials-0.4.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 1223f5555e9b8681239bf268d39a1d691337593d8ebc4105d4ff45fbcf8ecd2e |
|
MD5 | 6f5b669b87564d4a276e5796f12491f0 |
|
BLAKE2b-256 | cef684c77c95948871246fbdd38eb85066cb67e23e95522d60280121b9f36a33 |