NEW: packer files and minor update to aws-assume-role.py

This commit is contained in:
xpk
2025-06-10 09:49:00 +08:00
parent af3d1fe7b7
commit 6c764730d3
2 changed files with 59 additions and 12 deletions
Regular → Executable
+20 -12
View File
@@ -1,16 +1,24 @@
from typing import NoReturn
import json
#!/usr/bin/env python3.13
from botocore.exceptions import ClientError
import boto3
import base64
import sys
def lambda_handler(event, context) -> NoReturn:
def main() -> None:
# TODO implement
sts_client = boto3.client('sts')
assumed_role_object=sts_client.assume_role(
RoleArn="arn:aws:iam::111122223333:role/SomeRole",
RoleSessionName="lambda-assumeRoleMs"
)
print("export AWS_ACCESS_KEY_ID=" + assumed_role_object['Credentials']['AccessKeyId'])
print("export AWS_SECRET_ACCESS_KEY=" + assumed_role_object['Credentials']['SecretAccessKey'])
print("export AWS_SESSION_TOKEN=" + assumed_role_object['Credentials']['SessionToken'])
print("export AWS_DEFAULT_REGION=ap-east-1")
try:
assumed_role_object = sts_client.assume_role(
RoleArn="arn:aws:iam::" + sys.argv[1] + ":role/" + sys.argv[2],
RoleSessionName=sys.argv[2]
)
print(f'''
export AWS_ACCESS_KEY_ID={assumed_role_object['Credentials']['AccessKeyId']}
export AWS_SECRET_ACCESS_KEY{assumed_role_object['Credentials']['SecretAccessKey']}
export AWS_SESSION_TOKEN={assumed_role_object['Credentials']['SessionToken']}
export AWS_DEFAULT_REGION=ap-east-1")
''')
except ClientError as e:
print(e)
if __name__ == "__main__":
main()