aws-export-profile is a bash script that will output AWS export statements of your chosen aws boto profile. In case you have to manage multiple AWS accounts that rely on different boto profiles, you can activate a chosen profile by making it available in your shell environment.
This tool reads credentials from ~/.aws/credentials. If you are looking for a way to export boto profiles via aws sts assume-role instead, have a lookt at aws-export-assume-profile.
Note: Wrap the command in $(aws-export-profile) to actually export your boto environment variables.
Most AWS related tools support boto profiles out of the box, such as the aws-cli (Example: aws ec2 --profile <BOTO_PROFILE). However sometimes it is required to have your chosen boto profile available as shell variables. One of the use cases is when you use Docker and want a specific boto login available inside your container.:
# Export staging boto profile
user> $(aws-export-profile staging)
# Make AWS login available inside your Docker container
user> docker run --rm -it \
--env AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \
--env AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \
--env AWS_REGION=$AWS_REGION \
my-aws-dockerThe following export variables are currently supported.
| Variable | Description |
|---|---|
AWS_ACCESS_KEY |
Access key |
AWS_ACCESS_KEY_ID |
Alternative name for AWS_ACCESS_KEY |
AWS_SECRET_KEY |
Secret key |
AWS_SECRET_ACCESS_KEY |
Alternative name for AWS_SECRET_KEY |
AWS_SESSION_TOKEN |
Session token |
AWS_DELEGATION_TOKEN |
Alternative name for AWS_SESSION_TOKEN |
AWS_SECURITY_TOKEN |
Secret token |
AWS_REGION |
Region |
This tool simply output the exports to stdout. In order to auto-source them, wrap the command in $(...).
user> aws-export-profile testing
export AWS_ACCESS_KEY_ID="XXXXXXXXXXXXXXXXXXXX"
export AWS_ACCESS_KEY="XXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_ACCESS_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_REGION="eu-central-1"user> aws-export-profile deploy /jenkins/aws/credentials /jenkins/aws/config
export AWS_ACCESS_KEY_ID="XXXXXXXXXXXXXXXXXXXX"
export AWS_ACCESS_KEY="XXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_ACCESS_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_REGION="eu-central-1"user> aws-export-profile production
export AWS_ACCESS_KEY_ID="XXXXXXXXXXXXXXXXXXXX"
export AWS_ACCESS_KEY="XXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_ACCESS_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_SECRET_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
export AWS_SESSION_TOKEN="XXXXXXXXXXXXXXXXx/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXX="
export AWS_DELEGATION_TOKEN="XXXXXXXXXXXXXXXXx/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXX="
export AWS_REGION="eu-central-1"user> $(aws-export-profile production)
# Validate
user> env | grep AWS_
AWS_ACCESS_KEY_ID="XXXXXXXXXXXXXXXXXXXX"
AWS_ACCESS_KEY="XXXXXXXXXXXXXXXXXXXX"
AWS_SECRET_ACCESS_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
AWS_SECRET_KEY="A1Bc/XXXXXXXXXXXXXXXXXXXXXXXXXXX"
AWS_SESSION_TOKEN="XXXXXXXXXXXXXXXXx/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXX="
AWS_DELEGATION_TOKEN="XXXXXXXXXXXXXXXXx/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXXXXXXXXX/XXXXXXXXXXXX="
AWS_REGION="eu-central-1"user> $(aws-export-profile -u)Usage: aws-export-profile [profile] [credentials] [config]
aws-export-profile --unset, -u
aws-export-profile --help|-h
aws-export-profile --version|-v
This bash helper will output AWS export statements of your chosen aws boto profile.
Wrap this script in $(aws-export-profile) to export those environment variables.
Optional parameter:
[profile] Boto profile name to export. Default is 'default'
[credentials] Path to your aws credentials file.
Default is ~/.aws/credentials
[config] Path to your aws config file.
If no config file is found, AWS_REGION export will not be available.
Default is ~/.aws/config
Arguments:
--unset, -u Unset currently set AWS variables from env
--help, -h Show this help screen
--version, -v Show version
Available exports:
AWS_ACCESS_KEY_ID
AWS_ACCESS_KEY
AWS_SECRET_ACCESS_KEY
AWS_SECRET_KEY
AWS_SESSION_TOKEN
AWS_DELEGATION_TOKEN
AWS_SECURITY_TOKEN
AWS_REGION
Examples to show output:
aws-export-profile testing
aws-export-profile production /jenkins/aws/credentials /jenkins/aws/config
Examples to export:
$(aws-export-profile testing)
$(aws-export-profile production /jenkins/aws/credentials /jenkins/aws/config)
Examples to unset all AWS variables
\$(aws-export-profile -u)Copyright (c) 2018 cytopia