Profiles with AWSume and AWS Toolkit

Posted by Lukas Hajdu on Mon, Jul 6, 2020

To be able to access our AWS resources with AWS Toolkit, we need to configure your credentials. Configuring credentials can be, however, a problem when we use tools like AWSume.

Luckily, AWSume command accepts an optional argument --output-profile (-o). This command creates a profile with credentials in ~/.aws/credentials.

 1$ awsume my-user -a -o aws-explorer-my-user
 2$ cat ~/.aws/credentials
 3...
 4[aws-explorer-my-user]
 5manager = awsume
 6aws_access_key_id = ...
 7aws_secret_access_key = ...
 8aws_session_token = ...
 9region = eu-west-2
10autoawsume = true
11expiration = 2020-07-06 20:36:25
12source_expiration = 2020-07-06 21:29:43
13awsumepy_command = my-user -a -o aws-explorer-my-user

The argument -a will make sure the credentials are auto-refreshed. The newly created profile can be then selected from the list of credential profiles like any other existing profile.



comments powered by Disqus