Skip to content

Latest commit

 

History

History
19 lines (11 loc) · 757 Bytes

how-it-works.md

File metadata and controls

19 lines (11 loc) · 757 Bytes

How It Works

The wrapper aws-mfa-secure session command uses sts.get_session_token to fetch temporary session AWS access tokens.

The tokens get saved to ~/.aws/aws-mfa-secure-sessions/AWS_PROFILE and are then used to set the environment variables, which take the higher precedence.

  • AWS_ACCESS_KEY_ID
  • AWS_SECRET_ACCESS_KEY
  • AWS_SESSION_TOKEN

The arguments are delegate the to the aws command. So:

aws-mfa-secure session s3 ls

Is the same as:

aws s3 ls

Except using the session environment AWS_* variables values.