aws.sh

#!/bin/bash
role_name=`curl -s http://169.254.169.254/latest/meta-data/iam/security-credentials/`
creds=`curl -s http://169.254.169.254/latest/meta-data/iam/security-credentials/$role_name`
current_region=`curl -s http://169.254.169.254/latest/dynamic/instance-identity/document | jq -c -r .region`

export AWS_ACCESS_KEY_ID=`printf "%s" "$creds" | jq -r .AccessKeyId`
export AWS_SECRET_ACCESS_KEY=`printf "%s" "$creds" | jq -r .SecretAccessKey`
export AWS_SESSION_TOKEN=`printf "%s" "$creds" | jq -r .Token`
export AWS_DEFAULT_REGION=$current_region

docker run --rm -t $(tty &>/dev/null && echo "-i") -e "AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}" -e "AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}" -e "AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}" -e "AWS_DEFAULT_REGION=${AWS_DEFAULT_REGION}" -v "$(pwd):/project" mesosphere/aws-cli "$@"