Assumes an STS role and produces usable session credentials for CLI tools from an intercepted SAML assertion

Latest Version

Version

1.0

Update

November 11, 2020

Size

154KiB

Developer

SAML Assertion to AWS STS Assumption Extension

This extension allows you to extract credentials from a federated AWS console login so that you can use command line tools like terraform or AWSCLI.

For organisations using their corporate directory to control access to AWS console, this extension is essential to allow you to securely access AWS APIs with time based sessions without risking storing usernames and passwords.

Multiple accounts are supported, allowing you to use profile environment variables and command line parameters to access any account you are signed into.

Usage is simple - just sign into the console through your corporate directory and your temporary credentials will be saved to disk ready for use.

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "author": "terrafinity", "homepage_url": "https://github.com/terrafinity/samlauth-awssts-extension", "name": "SAML Assertion to AWS STS Assumption", "description": "Assumes an STS role and produces usable session credentials for CLI tools from an intercepted SAML assertion", "version": "1.0", "browser_action": { "default_icon": "resources/images/logo_32.png", "default_popup": "settings/popup.html" }, "icons": { "16": "resources/images/logo_16.png", "32": "resources/images/logo_32.png", "48": "resources/images/logo_48.png", "128": "resources/images/logo_128.png" }, "background": { "page": "background/background.html" }, "options_page": "settings/settings.html", "permissions": [ "webRequest", "https://signin.aws.amazon.com/saml", "storage", "downloads", "downloads.shelf" ]}

Download CRX(154KiB)