Run a command with AWS credentials

awsrun

#!/usr/bin/env bash
#
# awsrun - Run a command with AWS credentials.
#
# Credentials are read from lastpass using `lastpass-cli`. The key id for your
# account (which can be found via `lpass ls` is expected to be in the file
# `.lastpass-key-id`.
#
# Released as CC0 1.0.
# Full license available: https://creativecommons.org/publicdomain/zero/1.0/

set -euo pipefail


if (( $# == 0 )); then
	cat <<-END
	awsrun: Run a command with AWS credentials.

	Usage:
	  ${0} COMMAND
END
exit 1
fi

# Default to regular pinentry if we don't have this defined.
LPASS_PINENTRY="${LPASS_PINENTRY:-$(which pinentry)}"

read LASTPASS_KEY_ID < .lastpass-key-id

read -r AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY < <(
	lpass show --all "${LASTPASS_KEY_ID}" | awk '
		/Username|Password/ { printf "%s ", $2 }
		END { printf "\n" }
	')

export AWS_ACCESS_KEY_ID
export AWS_SECRET_ACCESS_KEY

exec "$@"
~/W/p/infrastructure (maste