AWSume: AWS Assume Made Awesome
Utility for easily assuming AWS IAM roles from the command line
Installation
Copy awsume to /usr/local/bin
chmod 700 /usr/local/bin/asume
alias awsume='. awsume'
Setup
Add profiles to ~/.aws/config
# ~/.aws/config
[profile internal-admin]
role_arn = arn:aws:iam::<my aws account id>/role/admin-role
mfa_serial = arn:aws:iam::<my aws account id>:mfa/joel
source_profile = joel
[profile client1-admin]
role_arn = arn:aws:iam::<client #1 account id>/role/admin-role
mfa_serial = arn:aws:iam::<your aws account id>:mfa/joel
source_profile = joel
[profile client2-admin]
role_arn = arn:aws:iam::<client #2 account id>/role/admin-role
mfa_serial = arn:aws:iam::<your aws account id>:mfa/joel
source_profile = joel
Add credentials to ~/.aws/credentials
# ~/.aws/credential
[default]
aws_access_key_id = AKIAIOIEUFSN9EXAMPLE
aws_secret_access_key = wJalrXIneUATF/K7MDENG/jeuFHEnfEXAMPLEKEY
[joel]
aws_access_key_id = AKIAIOSFODNN7EXAMPLE
aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
Usage:
awsume profilename [show]
awsume client1-admin Exports into current shell, will ask for MFA if needed
awsume client1-admin show Outputs export statements to copy / paste into some other shell, will ask for MFA if needed
See our blog for more details