config

# add to ~/.aws/config and add the path to your folder.
[serverless-deployments-dev]
role_arn = arn:aws:iam::ACCOUNT_ID:role/ROLE-NAME
role_session_name = SESSION_NAME
region = eu-west-2

get_credentials.sh

#!/bin/bash
# Place in ~/.aws
JQ=`which jq`
CURL=`which curl`
ROLE_NAME="EC2_ASSIGNED_ROLE"

if [ -z "$JQ" ] || [ -z "$CURL" ]
then
  echo "Required programs missing."
  echo "JQ: $JQ"
  echo "CURL: $CURL"
  exit 1
fi

$CURL -s http://169.254.169.254/latest/meta-data/iam/security-credentials/${ROLE_NAME} | $JQ '.Version = 1 | .SessionToken = .Token | del(.Token, .Type, .Code, .LastUpdated)'