cytopia / aws-export-profile Goto Github PK

I just saw this repo linked in @QuinnyPig's last-week-in-aws newsletter and I'm wondering what is your use-case to read the aws-cli credentials alone, as opposed to exposing the credentials aws-cli may create e.g. a session token?

I'm thinking of my team's setup which is role-driven (an IAM user only has the permission to do some password/mfa setup and assume a role --- more here ) thus session token handling are a must. But your script only reads the session token if it is are stored in a profile afaics. Am I wrong?

FWIW Our script (it's actually a shell function to get around the need to $(...) like you do) looks like this in combination with an ugly=hackish script to extract the credentials.

ie: AWS-Role@Account-Alias

$section gets stuck at last non @ profile name in ~/.aws/credentials