MOmooreds·Feb 13, 2024Submission
CLI tool to login and retrieve AWS temporary credentials using a SAML IDP
2 points · Open discussionVersent
saml2aws
Go2019–2024
Versent / saml2aws
saml2aws
CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP
5Distinct people
5Mentions
0Explicit recommenders
2.2KGitHub stars
What to know before exploring
What it is
CLI tool which enables you to login and retrieve AWS temporary credentials using a SAML IDP
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year5 dated mentions
Observed mentions: 2019-07-30 05:55:57 UTC to 2024-02-13 15:25:50 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 1 | 0 |
What Hacker News says
5 sourcesDepending on your SSO provider, you can list all the roles using saml2aws[0] and then parse the output so you can generate the relavant config. It is a bit tedious, but it works.
[0] https://github.com/Versent/saml2aws/
In Have lots of AWS accountsIn my company everything goes through Active Directory and we use saml2aws [1] to generate credentials with two factor involved. It works quite well for us. We even use this for our artists to create local builds of our games since we keep all important secrets and such in aws secrets mananger. We scope access to said secrets with custom roles and tags.
[1] https://github.com/Versent/saml2aws
In Show HN: AWS credentials management CLI toolHave you considered saml2aws[0]?
[0] https://github.com/Versent/saml2aws
In How to give access to AWS resources without creating 100s of IAM Users?We've been using SAML to log in to AWS for the better part of a year now and it's been pretty good for us.
When logging in, you assume a role (sts:AssumeRoleWithSAML), I'm surprised you did not mention the worst part: logging in to the CLI with this. You either have to manually input the returned SAML assertion to the AWS cli[1], but luckily there is a tool called saml2aws[2] to do this with the majority of identity providers.
saml2aws sadly didn't have proper support for assuming many roles at once, so we even ended up writing our own tool for this.
This is something AWS has completely ignored so far and I am not aware of any progress towards a better CLI experience.
[1]: https://aws.amazon.com/premiumsupport/knowledge-center/aws-c...
[2]: https://github.com/Versent/saml2aws
In How SAML 2.0 Authentication Works