aws-sts 0.1.0

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "aws/sts"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start(__FILE__)

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/exe/aws-sts

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+$LOAD_PATH.unshift File.expand_path("../lib", __dir__)
+
+require 'aws/sts'
+
+tool = Aws::Sts::Cli.new
+tool.main

data/lib/aws/sts.rb

@@ -0,0 +1,24 @@
+require "aws/sts/version"
+require "aws/sts/role"
+require 'aws_config'
+
+module Aws
+  module Sts
+    class Cli < StandardError
+      def initialize
+      end
+
+      def main
+        if ARGV.empty?
+          Role.blurb
+        else
+          profile = ARGV[0]
+          role_arn = AWSConfig[profile].role_arn
+          region   = AWSConfig[profile].region
+          @role = Role.new(role_arn, region, profile)
+          @role.print_keys
+        end
+      end
+    end
+  end
+end

data/lib/aws/sts/role.rb

@@ -0,0 +1,55 @@
+#!/usr/bin/env ruby
+
+require 'aws-sdk'
+require 'aws_config'
+
+require 'aws-sdk'
+
+class Role
+  attr_accessor :role_arn
+
+  def initialize(role_arn,region, profile)
+    if self.class.test_role_arn(role_arn)
+      @role_arn = role_arn
+    else
+      raise ArgumentError.new("Role Arn is not valid")
+    end
+
+    @region   = region
+    @profile  = profile
+    @client   = Aws::STS::Client.new(
+      region: @region,
+      profile: @profile,
+    )
+  end
+
+
+  def self.test_role_arn(role_arn)
+    role_arn =~ /^arn:aws:iam::(\d+):role\/([^\/]+)(\/.+)?$/
+  end
+
+  def self.blurb
+    puts "aws-sts <role>"
+  end
+
+  def print_keys
+
+    credentials = get_keys
+    puts "export AWS_ACCESS_KEY_ID=#{credentials.access_key_id}"
+    puts "export AWS_SECRET_ACCESS_KEY=#{credentials.secret_access_key}"
+    puts "export AWS_SESSION_TOKEN=#{credentials.session_token}"
+    puts "export ASSUMED_ROLE=#{@profile}"
+    puts "# run eval $(ruby Role.rb <profile>)"
+  end
+
+  private 
+
+  def get_keys
+    resp = @client.assume_role({
+      role_arn: @role_arn,
+      role_session_name: @profile,
+    })
+
+    resp.credentials
+  end
+end

data/lib/aws/sts/version.rb

@@ -0,0 +1,5 @@
+module Aws
+  module Sts
+    VERSION = "0.1.0"
+  end
+end

metadata

@@ -0,0 +1,91 @@
+--- !ruby/object:Gem::Specification
+name: aws-sts
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Lewis Robbins
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2020-04-29 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: aws_config
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: This tool allows you to a assume an AWS role using short-lived credentials,
+  it follows your aws config file
+email:
+- lewis.robbins2@gmail.com
+executables:
+- aws-sts
+extensions: []
+extra_rdoc_files: []
+files:
+- ".github/workflows/ruby.yml"
+- ".gitignore"
+- ".travis.yml"
+- CODE_OF_CONDUCT.md
+- Gemfile
+- Gemfile.lock
+- LICENSE
+- LICENSE.txt
+- README.md
+- Rakefile
+- aws-sts.gemspec
+- bin/console
+- bin/setup
+- exe/aws-sts
+- lib/aws/sts.rb
+- lib/aws/sts/role.rb
+- lib/aws/sts/version.rb
+homepage: https://github.com/lewisrobbins/aws-sts
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/lewisrobbins/aws-sts
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.3.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3
+signing_key: 
+specification_version: 4
+summary: Requests temporary AWS credentials using STS
+test_files: []