aws / aws/aws-cli

Support populating profiles for AWS SSO access

Open
#6,975 1 comment 9 reactions 1 assignee Claimed by @RyanFitzSimmonsAK View on GitHub
feature-request needs-review p2 sso
Dominant language
Python
Stars
17.3k
Forks
4.6k
Avg merge
1d 2h
Merged PRs (30d)
13

Description

### Describe the feature

With AWS SSO, there is programmatic access to all the accounts and roles a user has access to. This is currently leveraged by `aws configure sso` to provide autocompletion, but this means that a user has to create each profile manually.

Instead, it should be possible to run a single command that creates profiles for all the access a user has.

### Use Case

I currently have many hundreds of profiles, and that's only because I mainly use a single region, it would multiply if I also had to go into different regions for the same accounts and roles.

I need customizable profile names, because I am particular about how I want to name each profile.

### Proposed Solution

The model for this is [`aws-sso-util configure populate`](https://github.com/benkehoe/aws-sso-util/blob/master/docs/configure.md#aws-sso-util-configure-populate). This creates profiles for each account and role a user has access to, and allows highly-configurable profile names, including the option to invoke a command (e.g., a script) with the account and role information to generate the profile name.

One thing it does not currently do that I would like to see is to clean up profiles that were generated by it (marked with `sso_auto_populated = true`) that are no longer present in the user's access.

### Other Information

_No response_

### Acknowledgements

- [X] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CLI version used

N/A

### Environment details (OS name and version, etc.)

N/A

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.