docker_pwd_ecr_assume_role.sh

#!/bin/bash

set -e

if [ -z "$AWS_ACCESS_KEY_ID" ] || [ -z "$AWS_SECRET_ACCESS_KEY" ]; then
  echo "Please provide AWS credentials"
  exit 1
fi

if [ -z "$IAM_ROLE_ARN" ]; then
  echo "Please supply the IAM_ROLE_ARN parameter for ECR!"
  exit 1
fi

creds_json=$(aws sts assume-role --role-arn $IAM_ROLE_ARN --role-session-name auto-deploy)

export AWS_ACCESS_KEY_ID=$(echo "$creds_json" | jq .Credentials.AccessKeyId | tr -d '"')
export AWS_SECRET_ACCESS_KEY=$(echo "$creds_json" | jq .Credentials.SecretAccessKey | tr -d '"')
export AWS_SESSION_TOKEN=$(echo "$creds_json" | jq .Credentials.SessionToken | tr -d '"')

# This last line will output only the docker pwd
aws ecr get-login-password --region "us-east-1"