aws-cross-account-assume-role.sh

#!/usr/bin/env bash

# usage: $(assume_role <role_arn>)
assume_role(){
    local role=$1
    local session_name=${2:-"$(date +'%Y%m%d%h%H%M%S')"}
    aws sts assume-role --role-arn "$role" --role-session-name "$session_name" \
    --query 'Credentials.{AWS_ACCESS_KEY_ID:AccessKeyId, AWS_SECRET_ACCESS_KEY:SecretAccessKey, AWS_SESSION_TOKEN:SessionToken}' \
    | jq -r  'to_entries[]|("export "+.key+"="+.value)'
}
# switching back to default instance role
clear_credentials(){
    unset AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN;
}