NEW: packer files and minor update to aws-assume-role.py
This commit is contained in:
Regular → Executable
+20
-12
@@ -1,16 +1,24 @@
|
||||
from typing import NoReturn
|
||||
import json
|
||||
#!/usr/bin/env python3.13
|
||||
from botocore.exceptions import ClientError
|
||||
import boto3
|
||||
import base64
|
||||
import sys
|
||||
|
||||
def lambda_handler(event, context) -> NoReturn:
|
||||
def main() -> None:
|
||||
# TODO implement
|
||||
sts_client = boto3.client('sts')
|
||||
assumed_role_object=sts_client.assume_role(
|
||||
RoleArn="arn:aws:iam::111122223333:role/SomeRole",
|
||||
RoleSessionName="lambda-assumeRoleMs"
|
||||
)
|
||||
print("export AWS_ACCESS_KEY_ID=" + assumed_role_object['Credentials']['AccessKeyId'])
|
||||
print("export AWS_SECRET_ACCESS_KEY=" + assumed_role_object['Credentials']['SecretAccessKey'])
|
||||
print("export AWS_SESSION_TOKEN=" + assumed_role_object['Credentials']['SessionToken'])
|
||||
print("export AWS_DEFAULT_REGION=ap-east-1")
|
||||
try:
|
||||
assumed_role_object = sts_client.assume_role(
|
||||
RoleArn="arn:aws:iam::" + sys.argv[1] + ":role/" + sys.argv[2],
|
||||
RoleSessionName=sys.argv[2]
|
||||
)
|
||||
print(f'''
|
||||
export AWS_ACCESS_KEY_ID={assumed_role_object['Credentials']['AccessKeyId']}
|
||||
export AWS_SECRET_ACCESS_KEY{assumed_role_object['Credentials']['SecretAccessKey']}
|
||||
export AWS_SESSION_TOKEN={assumed_role_object['Credentials']['SessionToken']}
|
||||
export AWS_DEFAULT_REGION=ap-east-1")
|
||||
''')
|
||||
except ClientError as e:
|
||||
print(e)
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
|
||||
Reference in New Issue
Block a user