aws-mfa

Authenticate to AWS with MFA 🔐

➜ aws-mfa -h
aws-mfa
Authenticate to AWS with MFA 🔐

USAGE:
    aws-mfa [OPTIONS] --code <CODE> <HOME>

ARGS:
    <HOME>    Home directory containing the AWS hidden folder [env: HOME=/Users/JohnDoe]

OPTIONS:
    -c, --code <CODE>            MFA code
    -d, --duration <DURATION>    Session duration in seconds [default: 3600]
    -h, --help                   Print help information
    -p, --profile <PROFILE>      Name of the AWS profile [default: default]
    -r, --region <REGION>        Name of the AWS region [default: eu-west-1]
    -s, --suffix <SUFFIX>        Suffix of the original AWS profile [default: noauth]

Installation

aws-mfa is published on crates.io and can be installed with

cargo install aws-mfa

or downloaded as binary from the releases page.

Usage

Add basic credentials in ~/.aws/credentials:

[<profile_name>-noauth]
aws_access_key_id = <aws_access_key_id>
aws_secret_access_key = <aws_secret_access_key>

Note: make sure to add the -noauth suffix to the profile name

Run aws-mfa:

aws-mfa -p <profile_name> -c <mfa_code>

Check generated credentials in ~/.aws/credentials:

[<profile_name>]
aws_access_key_id = <aws_access_key_id>
aws_secret_access_key = <aws_secret_access_key>
aws_session_token = <aws_session_token>