Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API.

Latest Version

Version
3.3
Update
March 20, 2023
Size
157KiB
Developer
Category
Users
10,000+
Rating
3.77778 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
WebRequest
Storage
Downloads
See more

SAML to AWS STS Keys Conversion Extension

Google Chrome Extension which converts a SAML 2.0 assertion to AWS STS Keys (temporary credentials -> AccessKeyId, SecretAccessKey and SessionToken).

### Why this Chrome Extension? ###
If you don't have any user administration setup within AWS Identity & Access Management (IAM) but instead rely on your corporate user directory, i.e. Microsoft Active Directory. Your company uses a SAML 2.0 Identity Provider (IDP) to log in to the AWS Web Management Console (Single Sign On). Then this Chrome Estension if for you!

You run into trouble as soon as you would like to execute some fancy scripts from your computer which calls the AWS API's. When sending a request to the AWS API's you need credentials, meaning an AccessKey and SecretKey. You can easily generate these keys for each user in AWS IAM. However, since you don't have any users in AWS IAM and don't want to create users just for the sake of having an AccessKey and SecretKey you are screwed. But there is a way to get temporary credentials specifically for your corporate identity.

The Security Token Service (STS) from AWS provides an API action assumeRoleWithSAML. Using the SAML Assertion given by your IDP the Chrome Extension will call this API action to fetch temporary credentials. (AccessKeyId, SecretAccessKey and SessionToken). This way there is no need to create some sort of anonymous user in AWS IAM used for executing scripts. This would be a real security nightmare, since it won't be possible to audit who did what. This Chrome Extension however will make it super easy for you to just use your corporate identity for executing scripts calling AWS API's.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "author": "G.T.C. Laan (prolane.org)", "homepage_url": "https://github.com/prolane/samltoawsstskeys", "name": "SAML to AWS STS Keys Conversion", "description": "Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API.", "version": "3.3", "icons": { "16": "icons/icon_16.png", "32": "icons/icon_32.png", "48": "icons/icon_48.png", "128": "icons/icon_128.png" }, "action": { "default_icon": "icons/icon_32.png", "default_popup": "popup/popup.html" }, "background": { "service_worker": "background/script.js" }, "options_page": "options/options.html", "permissions": [ "webRequest", "storage", "downloads" ], "host_permissions": [ "" ]}
Read more

How to download and manually install SAML to AWS STS Keys Conversion extension for Chrome

Looking for a way to install SAML to AWS STS Keys Conversion extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install SAML to AWS STS Keys Conversion extensions manually, this article outlines two simple methods to effortlessly install SAML to AWS STS Keys Conversion extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download SAML to AWS STS Keys Conversion extension and manually install through Drag &Drop

If you ever need to manually install a SAML to AWS STS Keys Conversion extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the SAML to AWS STS Keys Conversion Extension by clicking the "Download CRX" button on the website.

Look for the SAML to AWS STS Keys Conversion extension you wish to install. Go to the website and download the SAML to AWS STS Keys Conversion extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for SAML to AWS STS Keys Conversion extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the SAML to AWS STS Keys Conversion extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download SAML to AWS STS Keys Conversion extension for Chrome and install in Developer Mode

This is another method to install SAML to AWS STS Keys Conversion extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the SAML to AWS STS Keys Conversion extension file

Select and download the SAML to AWS STS Keys Conversion extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the SAML to AWS STS Keys Conversion extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your SAML to AWS STS Keys Conversion extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the SAML to AWS STS Keys Conversion extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install SAML to AWS STS Keys Conversion extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

AWS SAML Keys Extension · Developer Tools 10,000+ 0 ★ 13.78KiB

icon

SAML to AWS STS Keys Conversion Multi Profile Extension · Productivity 10,000+ 0 ★ 529KiB

icon

aws-launcher Extension · Productivity 10,000+ 4 ★ 6.28MiB

icon

Chrome AWS SAML Token Expiry Reminder Extension · Developer Tools 10,000+ 3 ★ 36.62KiB

icon

SAML Assertion to AWS STS Assumption Extension · Developer Tools 10,000+ 0 ★ 154KiB

icon

CloudKeeper - Credential Helper Extension · Developer Tools 10,000+ 2 ★ 827KiB

icon

AWS Extend Switch Roles Extension · Developer Tools 10,000+ 82 ★ 82.44KiB

icon

idpawssamlinterceptor Extension · Developer Tools 10,000+ 1 ★ 1.24MiB

icon

Console Recorder for AWS Extension · Productivity 10,000+ 12 ★ 7.01MiB

icon

SAML Message Decoder Extension · Developer Tools 10,000+ 32 ★ 450KiB

icon

SAML-tracer Extension · Developer Tools 10,000+ 30 ★ 99.9KiB

icon

AWS Sidebar Extension · Developer Tools 10,000+ 4 ★ 1.34MiB

icon

AWS Console Fixes Extension · Developer Tools 10,000+ 3 ★ 264KiB

icon

ModHeader - Modify HTTP headers Extension · Developer Tools 10,000+ 1061 ★ 676KiB

icon

SAML Chrome Panel Extension · Developer Tools 10,000+ 54 ★ 183KiB

icon

Secret Server Clipboard Utility Extension · Productivity 10,000+ 22 ★ 30.54KiB

icon

My Apps Secure Sign-in Extension Extension · Productivity 10,000+ 136 ★ 185KiB

icon

Former2 Helper Extension · Productivity 10,000+ 6 ★ 1.6MiB

icon

AWS Helper Extension · Developer Tools 10,000+ 4 ★ 494KiB

icon

SAML DevTools extension Extension · Developer Tools 10,000+ 29 ★ 7.85MiB

icon

Virtru Email Protection Extension · Productivity 10,000+ 117 ★ 6.49MiB

icon

AWS console regions color Extension · Productivity 10,000+ 17 ★ 265KiB

icon

Real AWS Status Extension · Productivity 10,000+ 7 ★ 364KiB

icon

AWS Role Editor Extension · Developer Tools 10,000+ 10 ★ 174KiB

User reviews

icon

Shubham Gupta - Tech Team (ID: 000000a79f4273e0) Voted 1 ★ - Updated 12/19/2022 There is an issue in latest version 3.1, in script.js file inside "onBeforeRequestEvent" function "sessionduration" is not defined because of that it is not working please fix this asap.

icon

Praveen Dumpala (ID: 000000becdf3cb46) Voted 1 ★ - Updated 12/16/2022 The latest version v3.0 release on 2022-Dec-15 is not working, please test and fix it. Not able to download credentials file.

icon

Alexander Carlson (ID: 0000005f162fd6e1) Voted 5 ★ - Updated 09/21/2020 Excellent!

icon

R W (ID: 00000044d8976869) Voted 3 ★ - Updated 04/11/2019 Best tool aout there for this, but no competition. Would be good to see it write aws_session_expiration value into the credentials. Even better if it could load an existing credentials file then update

icon

Jason Hutchinson (ID: 000000a8d4006aa1) Voted 5 ★ - Updated 03/17/2019 As per @Leander's review. Very,very handy tool for federated access to AWS accounts when using the CLI!