Assume an AWS role for Organization accounts with shared IAM

aws-assume-role.sh

#! /bin/bash

# Usage:
# source aws-assume-role 281158451634

account=$1

unset AWS_SESSION_TOKEN
unset AWS_ACCESS_KEY_ID
unset AWS_SECRET_ACCESS_KEY
temp_role=$(aws sts assume-role \
                    --role-arn "arn:aws:iam::${account}:role/OrganizationAccountAccessRole" \
                    --role-session-name "$USER")

export AWS_ACCESS_KEY_ID=$(echo $temp_role | jq .Credentials.AccessKeyId | xargs)
export AWS_SECRET_ACCESS_KEY=$(echo $temp_role | jq .Credentials.SecretAccessKey | xargs)
export AWS_SESSION_TOKEN=$(echo $temp_role | jq .Credentials.SessionToken | xargs)

env | grep -i AWS_