get temporary credentials for using aws resources with force mfa policy

get-temporary-credentials.sh

#!/bin/bash
set -eu
# USAGE:
# ./get-temporary-credentials.sh TOKEN
# sample: ./get-temporary-credentials.sh 123456


# AWS named profile
AWS_PROFILE=personal
# The identification number of the MFA device that is associated with the IAM user who is making the GetSessionToken call
AWS_MFA_SERIAL_NUMBER="arn:aws:iam::<ACCOUNT_ID>:mfa/<USERNAME>"
# The value provided by the MFA device, if MFA is required.
MFA_TOKEN="$1"
# The duration, in seconds, that the credentials should remain valid
CREDENTIALS_DURATION=86400

MFA_CREDENTIALS=$(aws --profile ${AWS_PROFILE} sts get-session-token --serial-number ${AWS_MFA_SERIAL_NUMBER} --token-code "${MFA_TOKEN}" --duration-seconds ${CREDENTIALS_DURATION})

AWS_ACCESS_KEY_ID=$(echo "${MFA_CREDENTIALS}" | jq -r '.Credentials.AccessKeyId' )
AWS_SECRET_ACCESS_KEY=$(echo "${MFA_CREDENTIALS}" | jq -r '.Credentials.SecretAccessKey' )
AWS_SESSION_TOKEN=$(echo "${MFA_CREDENTIALS}" | jq -r '.Credentials.SessionToken' )

echo AWS_ACCESS_KEY_ID="${AWS_ACCESS_KEY_ID}"
echo AWS_SECRET_ACCESS_KEY="${AWS_SECRET_ACCESS_KEY}"
echo AWS_SESSION_TOKEN="${AWS_SESSION_TOKEN}"