aws-sso-google
Provides AWS STS credentials based on Google Workspace SAML SSO auth
AI Summary
aws-sso-google
A command-line tool that acquires AWS STS credentials via Google Workspace SAML SSO and supplies them to the AWS CLI automatically.
Target Users
Intermediate-to-advanced DevOps or cloud engineers who use AWS through Google Workspace SAML and need non-interactive credential refresh in the AWS CLI.
Problems Solved
Obtaining AWS credentials through Google Workspace SAML normally requires manual browser log-ins, hindering automation.
Tags
Main Features
Integration with AWS CLI via credential_process
Supports AWS CLI’s credential_process, automatically fetching and refreshing temporary STS credentials when aws commands run.
Supports all Google 2FA methods
Works with every two-factor authentication method offered by Google Workspace, including SMS, TOTP and FIDO.
Easy installation via Homebrew or go install
Users can install the binary with Homebrew or go install, requiring no extra dependencies.
Usage Examples
A Google Apps Script-based code example cannot be provided because the library is a CLI tool and not designed for direct use within GAS.