authing-aws

README

Authing AWS

A CLI for fetching AWS Credentials on Authing via SAML Response.

Install

Install via Homebrew

brew tap dreampuf/authing-aws
brew install authing-aws

Install via Docker

docker pull dreampuf/authing-aws:latest
docker run -it --rm dreampuf/authing-aws:latest authing-aws #options

Install manually

1. Find a usable binary in release page
2. Download binary and unarchive the package.

   curl -L -o ~/Downloads/authing-aws.tar.gz https://github.com/dreampuf/authing-aws/releases/download/v0.0.1/authing-aws_0.0.1_Darwin_x86_64.tar.gz
   tar -xf ~/Downloads/authing-aws.tar.gz
   

Usage

You can get your AWS Credential in the following line:

authing-aws -url "https://path-to-authing-login-domain" \
  -username your-authing-username \
  -password your-password
  -app 0

Or to have a selected app

authing-aws -url "https://path-to-authing-login-domain" \
  -username your-authing-username \
  -password your-password
  -app "My AWS App"

You can set a function as a shortcut in your profile file

aws-app () {
  eval $(authing-aws -url "https://path-to-authing-login-domain" \
    -username your-authing-username \
    -password your-password
    -app "My AWS App")
}

Test if it works

aws sts get-caller-identity

Help of authing-aws

authing-aws -help
Usage of authing-aws:
  -app string
    	selected app
  -debug
    	enable debug logs
  -disable-headless
    	disable headless mode to show chrome
  -duration int
    	duration in seconds (default 36000)
  -password string
    	password
  -region string
    	region of SAMLResponse (default "cn-north-1")
  -url string
    	URL
  -username string
    	username 

How it works

It capture the SAML Response and use it to fetch aws access token.
This depends on chromedp to communicate with browser (Chrome) and aws-sdk-go to exchange access token.

License

GPL-3.0 license