AWS azure login: any method to "role" parameter in command?

Viewed 15

We use "aws-azure-login" tool to provide SSO login to AWS console. Currently our team have got multiple roles across multiple profiles

Below is sample config

[default]
region=eu-west-1
azure_tenant_id=xxxxxxxx
azure_app_id_uri=https://signin.aws.amazon.com/saml
azure_default_username=my_email_or_id
azure_default_role_arn=
azure_default_duration_hours=12
azure_default_remember_me=true

[profile dev-role-admin]
region=eu-west-1
source_profile=default
role_arn=arn:aws:iam::1234556789:role/my-dev-role-admin
color=ffd600

But when we login

aws-azure-login --profile dev-role-admin

Output is below

##
Using AWS SAML endpoint https://signin.aws.amazon.com/saml
Role: (Use arrow keys)
> arn:aws:iam::12345568898:role/DEV_AWS_dev_AppCreator
  arn:aws:iam::12345568898:role/DEV_AWS_prod_AppCreator
  arn:aws:iam::12345568898:role/DEV_AWS_dev_ReadOnly
  arn:aws:iam::12345568898:role/DEV_AWS_dev_Executor
  .... about 60+ entries

the prompt comes with around 60+ roles across various AWS accounts and its quite hard to navigate them down using arrow keys

So just checking if there is any way we can pass the relevant role into the CLI command? ideally something like below

aws-azure-login --profile dev-role-admin --role arn:aws:iam::12345568898:role/DEV_AWS_dev_ReadOnly
0 Answers
Related