token-code-fn-applescript-demo.js

const { SharedIniFileCredentials, STS } = require('aws-sdk')
const { execSync } = require('child_process')

const OK_RESPONSE = /button returned:OK, text returned:(?<answer>\S+)/

async function tokenCodeAppleScript (serialno, callback) {
  try {
    const cmd = `osascript -e 'display dialog "Enter MFA code for ${serialno}:" default answer ""'`
    const response = execSync(cmd).toString()
    const match = response.match(OK_RESPONSE)
    if (match) {
      const { answer } = match.groups
      callback(null, answer)
    }
    callback(null, "")
  } catch (error) {
    callback(error)
  }
}

const credentials = new SharedIniFileCredentials({
  profile: process.env.AWS_PROFILE,
  tokenCodeFn: tokenCodeAppleScript
})
const sts = new STS({ credentials })
sts.getCallerIdentity().promise()
  .then((data) => {
  console.log('Successfully assumed role:', data)
}).catch((error) => {
  console.error(error.message)
})