Loading Credentials from a Profile Backed by SSO?

[naftulikay]

My organization uses SSO for CLI access, so my ~/.aws/config looks something like this:

[profile prod]
sso_start_url = https://d-${ACCOUNT_ID}.awsapps.com/start
sso_region = us-east-1
sso_account_id = ${ACCOUNT_ID}
sso_role_name = ${ROLE_NAME}
region = us-east-1

From the AWS CLI, I occasionally have to do aws --profile prod sso login, otherwise I can just use aws --profile prod ecr do-things and things will work. I can see that ~/.aws/sso/cache/$HASH.json exists, but it only has an access key and not the typical AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.

I'm writing a pretty simple demonstration to run locally to check that my Lambda will do what it should and so I can play around with the returned data.

Is there a ProvideCredentials implementation for SSO login like this, or do I have to write something myself?

[rcoh]

There's no SSO support currently but it's on the roadmap: #4

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.