BW-AWS: MFA

bw-aws.ps1

if ((Find-BWField -item $item -name "IS_ROOT") -eq "true") {
    $mfaArn = "arn:aws:iam::$($account):mfa/root-account-mfa-device"
} else {
    $mfaArn = "arn:aws:iam::$($account):mfa/$($item.login.username)"
}

if ($item.login.totp) {
    $token = bw get totp $id
    $result = aws sts get-session-token --serial-number $mfaArn --token-code $token `
        --duration-seconds $sessionLifetime | ConvertFrom-Json
} else {
    $result = aws sts get-session-token --duration-seconds $sessionLifetime | ConvertFrom-Json
}