aws cli で assume role する bash スクリプト

assume-role.sh

#! /bin/bash

roleArn='arn:aws:iam::xxxx:role/xxxx'
serialNumber='arn:aws:iam::xxxx:mfa/xxxx'

assumerole() {
        read -p "Enter mfa code: " mfacode
        d=`date "+%Y%m%d%H%M%S"`
        aws sts assume-role --role-arn $roleArn --serial-number $serialNumber --role-session-name cli${date} --token-code ${mfacode}
}

unset AWS_ACCESS_KEY_ID
unset AWS_SECRET_ACCESS_KEY
unset AWS_SESSION_TOKEN

result=`assumerole`
export AWS_ACCESS_KEY_ID=`echo ${result} | jq '.Credentials.AccessKeyId'`
export AWS_SECRET_ACCESS_KEY=`echo ${result} | jq '.Credentials.SecretAccessKey'`
export AWS_SESSION_TOKEN=`echo ${result} | jq '.Credentials.SessionToken'`