Describe the feature
The aws configure get subcommand doesn't support reading sso-session configuration items.
Use Case
I work alot with multiple instances of Identity Center and use many AWS Profiles with SSO Sessions configured for each one, I made a library of helper bash functions which wraps around common Operations/Developer CLI commands... These, when creating resources or interacting with services may output console HyperLinks or open console pages.. so one can view the resources in the console quickly without having to click through 5+ weblinks to get there.
To ensure the browser opens the Console in the context of the correct SSO Session I can build a hyperlink in the following format.
http://<sso_start_url>?account_id=<profile_account_it>®ion=<profile_region_id>&role=<profile_role_id>&destination=<url_encoded_console_url>
This way the SSO context is correctly set before redirecting to the target destination in the URL.
Real example...
With current shell directory set to a checked out codecommit repository I run a bash command.
open-pipeline-execution
This would then take me to the sso console refresh my session to the respective codepipeline execution for that Repository.
Proposed Solution
Already opened a PR the other week as linked to this Issue with necessary Unit Tests updates... just need to find out how to get it reviewed.
#8690
The underlying boto3 method used by 'aws configure get' to read the local .aws/config is already able to parse the sso-section. The AWS CLI abstraction, however, hardcodes the config section type as 'profile'. This is addressed by the above PR.
Other Information
I work in AWS so reach out to me for more info. @alxev
Acknowledgements
CLI version used
2.16.4
Environment details (OS name and version, etc.)
MacOS
Describe the feature
The aws configure get subcommand doesn't support reading sso-session configuration items.
Use Case
I work alot with multiple instances of Identity Center and use many AWS Profiles with SSO Sessions configured for each one, I made a library of helper bash functions which wraps around common Operations/Developer CLI commands... These, when creating resources or interacting with services may output console HyperLinks or open console pages.. so one can view the resources in the console quickly without having to click through 5+ weblinks to get there.
To ensure the browser opens the Console in the context of the correct SSO Session I can build a hyperlink in the following format.
This way the SSO context is correctly set before redirecting to the target destination in the URL.
Real example...
With current shell directory set to a checked out codecommit repository I run a bash command.
This would then take me to the sso console refresh my session to the respective codepipeline execution for that Repository.
Proposed Solution
Already opened a PR the other week as linked to this Issue with necessary Unit Tests updates... just need to find out how to get it reviewed.
#8690
The underlying boto3 method used by 'aws configure get' to read the local .aws/config is already able to parse the sso-section. The AWS CLI abstraction, however, hardcodes the config section type as 'profile'. This is addressed by the above PR.
Other Information
I work in AWS so reach out to me for more info. @alxev
Acknowledgements
CLI version used
2.16.4
Environment details (OS name and version, etc.)
MacOS