assume role + envchain

assume-chain

#!/bin/bash

set -euo pipefail

function main() {
  local -r name=$1
  local -r arn=$2

  local out
  out=$(aws sts assume-role --role-arn "$arn" --role-session-name "$USER-$(date +'%s')")

  jq -r .Credentials.AccessKeyId <<< "$out" | envchain --set "$name" AWS_ACCESS_KEY_ID
  echo
  jq -r .Credentials.SecretAccessKey <<< "$out" | envchain --set $name AWS_SECRET_ACCESS_KEY
  echo
  jq -r .Credentials.SessionToken <<< "$out" | envchain --set $name AWS_SESSION_TOKEN
  echo

  1>&2 echo -n "exipires at "
  1>&2 jq -r .Credentials.Expiration <<< "$out"
}

main "$@"