Matthew Buckett buckett

Launching Chrome profiles for AWS CLI

Introduction

When an AWS account is set up to use AWS IAM Identity Center it's common to have SSO integration. The CLI then uses temporary credentials to access the AWS account that need to be refreshed on a regular basis. This is normally done with the command aws sso login which launches the default browser for the user to authorize the CLI to access the account. If you want to use a non-standard Chrome profile for AWS this is how.

Shell Script

You need a shell script to launch Chrome with the correct profile. Here is an example script that you can use:

	#!/bin/bash

	# This attempts to look in all the jar files for any tag library description files (tlds).
	# This is useful because to speed up tomcat startup you can stop if scanning everything
	# and then add back in the files that are needed.

	# This needs to be run on a tomcat folder that has unpacked wars as it won't find JARs inside
	# WARs.

	# It outputs the pattern to put in the `tldScan` attribute of the JAR scanner


	<!doctype html>
	<html>
	<head>
	<script src="https://ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
	<script type="text/javascript">
	var spData = null;
	var columnTitle = [];
	var URL_COL_NUMBER = 11; // Column L
	var EMAIL_COL_NUMBER = 8; // Col I

	# From end for first comment to package declaration
	/*\//,/^package/ {
	# Remove anything inside a comment
	/^\/\\/,/*\// {
	d
	}
	}

	/*
	* Copyright 2002-2018 the original author or authors.
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software

	#!/bin/bash
	# Canvas cURL
	# Just pulls OAuth token for Canvas from keychain and puts it in the Authorization header

	# You can set passwords with:
	# security add-generic-password -a buckett -s canvas.instructure.com -w ....
	# and if you need to update a token you need to first delete it with:
	# security delete-generic-password -a buckett -s canvas.instructure.com
	# This will also mean that the the security tool has read access by default.

	/*
	* Copyright (c) 2020, University of Oxford
	*/
	import React from 'react'
	import PropTypes from 'prop-types'

	/**
	* This is just an div that covers the whole of the iframe. When the surrounding
	* page is scrolled the div is moved to the new location. You should just have
	* a single one of these components in an application and all components should