This python package provides a method for mfa-authenticated API access to AWS resources.
This tool is just one part of a larger setup that forces programmatic requests to the AWS API to be authenticated with multi-factor authentication. For details on how to configure IAM to forbid non-mfa-authenticated access to AWS resources, consult this AWS guide.
To install the aws-session-credentials
CLI tool, simply install this package via pip
:
pip install git+ssh://[email protected]/thumbtack/aws-session-credentials.git
aws-session-credentials --help
This package is both Python2 and Python3 compliant and can be safely used in either environment.
An independent executable is also available on the GitHub releases page.
For details and examples on invoking the CLI tool, run aws-session-credentials --help
.
This repository is structured as a python package. When working on this project, it is recommended to install the package in development mode:
git clone [email protected]:thumbtack/aws-session-credentials.git
pip install -e .
Tests can be run with:
python -m unittest discover
Release tests are run against both a Python2 and Python3 environment, so it is recommended to locally test changes using both editions of Python.
The pex
project can be used to build an executable file for the CLI tool:
pip install pex
pex . -m aws_session_credentials -o aws-session-credentials