aws-sso-profiles

Generate or update ~/.aws/config with a profile for each SSO account you have access to, by using an existing AWS SSO session.

Bootstrap

Create a bootstrap aws config file in the current directory:

[profile bootstrap]
sso_start_url = https://COMPANY.awsapps.com/start
sso_region = us-east-1
sso_account_id =
sso_role_name =

AWS_CONFIG_FILE=$PWD/bootstrap AWS_PROFILE=bootstrap aws sso login

go run github.com/sparebank1utvikling/aws-sso-profiles@main

Result

Your ~/.aws/config will now contain all permission sets you have access to via this SSO start URL, in addition to your existing config:

[profile account1-role1]
sso_start_url  = https://COMPANY.awsapps.com/start
sso_account_id = 123456789012
sso_role_name  = Role1
sso_region     = us-east-1
region         = us-east-1

[profile account2-role2]
sso_start_url  = https://COMPANY.awsapps.com/start
sso_account_id = 123456789012
sso_role_name  = role2
sso_region     = us-east-1
region         = us-east-1

[profile existing]
region         = us-east-1
...