Skip to content

Instantly share code, notes, and snippets.

@albertocorrales

albertocorrales/aws_assume_role_mfa.ps1

Last active August 16, 2021 21:36
Show Gist options
  • Save albertocorrales/f05c1f84554d20e3d32222964dcfaef0 to your computer and use it in GitHub Desktop.
Save albertocorrales/f05c1f84554d20e3d32222964dcfaef0 to your computer and use it in GitHub Desktop.
Download ZIP
PowerShell script to setup your AWS profile to assume a role with MFA
Raw
aws_assume_role_mfa.ps1
$MfaDeviceArn = "#YOUR_MFA_DEVICE_ARN#"
$DurationInSeconds = 28800
$OpsProfileName = "ops"
$MfaProfileName = "mfadev"
$MfaCode = Read-Host -Prompt 'Please, input your MFA code'
$TempCredentials = aws sts get-session-token --duration-seconds $DurationInSeconds --serial-number $MfaDeviceArn --token-code $MfaCode --profile $OpsProfileName | ConvertFrom-Json
Write-Output "Updating your profile '$MfaProfileName' with your new temporary credentials..."
$AccessKeyId = ($TempCredentials).Credentials.AccessKeyId
$SecretAccessKey = ($TempCredentials).Credentials.SecretAccessKey
$SessionToken = ($TempCredentials).Credentials.SessionToken
aws configure set aws_access_key_id $AccessKeyId --profile $MfaProfileName
aws configure set aws_secret_access_key $SecretAccessKey --profile $MfaProfileName
aws configure set aws_session_token $SessionToken --profile $MfaProfileName
Write-Output "Profile '$MfaProfileName' updated successfully!"
Read-Host -Prompt "Press any key to continue or CTRL+C to quit"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment