Use MFA token to authenticate access to AWS resources through the AWS CLI

get_programmatic_access.sh

#!/bin/bash

set -o pipefail
usage() {
	echo 'Usage:
source ./script.sh <IAM_USERNAME> <MFA_CODE> <ACCOUNT_ID> <PROFILE_NAME>
Requires:
* jq
* aws cli
* PROFILE_NAME is default when you do 'aws configure' at first
'
}
if [ "$#" -ne 4 ]; then
	usage
else
	IAM_USERNAME="$1"
	MFA_CODE="$2"
	ACCOUNT_ID="$3"
        PROFILE="$4" 
	GET_CREDENTIALS=`aws sts get-session-token --output json \
		--serial-number arn:aws:iam::"$ACCOUNT_ID":mfa/"$IAM_USERNAME" \
		--token-code "$MFA_CODE" \
		--duration-seconds 9000 \
                --profile "$PROFILE"`
	export AWS_ACCESS_KEY_ID=$(echo ${GET_CREDENTIALS} | jq -c -r .Credentials.AccessKeyId)
	export AWS_SECRET_ACCESS_KEY=$(echo ${GET_CREDENTIALS} | jq -c -r .Credentials.SecretAccessKey)
	export AWS_SESSION_TOKEN=$(echo ${GET_CREDENTIALS} | jq -c -r .Credentials.SessionToken)
	export AWS_DEFAULT_REGION=ap-southeast-1
	export AWS_DEFAULT_OUTPUT=json
        export AWS_PROFILE=$PROFILE
fi