A Bash function to assume an AWS role with MFA and update the awscli environment to the assumed role

sts_assume_role.bash

sts_assume_role () {
    read -p "Enter a current MFA token code: " token_code
    role_credentials=`aws sts assume-role \
	    --role-arn <role-arn> \
	    --role-session-name <session-name> \
	    --serial-number <mfa-arn> \
	    --token-code ${token_code}`
    export AWS_ACCESS_KEY_ID=$(echo $role_credentials | jq -r .Credentials.AccessKeyId)
    export AWS_SECRET_ACCESS_KEY=$(echo $role_credentials | jq -r .Credentials.SecretAccessKey)
    export AWS_SESSION_TOKEN=$(echo $role_credentials | jq -r .Credentials.SessionToken)
}

One can also obtain the token from 1Password with something like:

TOKEN_CODE=$(op item get "AWS (Ombu)" --vault Work --otp)

Credit to @Cabalist