Export AWS SSO credentials

source-aws-sso-credentials.sh

#!/bin/bash

echo "unsetting previous aws credentials..."
unset AWS_ACCESS_KEY_ID
unset AWS_SECRET_ACCESS_KEY
unset AWS_SESSION_TOKEN

aws sso login &&
aws sts get-caller-identity > /dev/null && # this refresh the cache
echo "sourcing aws credentials"
JSON_BASEPATH="${HOME}/.aws/cli/cache" # the cache folder contains the cached credentials from the sessions
json_file=$(ls -tr "${JSON_BASEPATH}" | tail -n1) # list in reverse cronological order and tail the last line 
export AWS_ACCESS_KEY_ID=$(cat ${JSON_BASEPATH}/${json_file} | jq -r '.Credentials.AccessKeyId')
export AWS_SECRET_ACCESS_KEY=$(cat ${JSON_BASEPATH}/${json_file} | jq -r '.Credentials.SecretAccessKey')
export AWS_SESSION_TOKEN=$(cat ${JSON_BASEPATH}/${json_file} | jq -r '.Credentials.SessionToken')
echo "done!"

• To login into a specific profile, specify it via environmental variable AWS_PROFILE=myprofile
• You can wrap this into a function in your bash profile or .zshrc, ex:

   aws-sso-login(){
     // this gist code
  }