granted VS aws-extend-switch-roles

You're going to love https://granted.dev. It can be extended further, as we've done internally: https://www.duckbillgroup.com/blog/overhauling-aws-account-a...

Like most problems I started with the typical search for AWS SSO CLI and console related tools to help out. One of the write-ups that stood out for me was from Corey Quinn - taking aws logins for granted (fun fact: the title of this article was almost identical without me even noticing, you win this round Corey). The article really hit home the problems I was having and suggested the use of Granted (github link) (Granted.dev has some nice info).

https://granted.dev uses FF containers. You can auth via CLI and then log into all of your accounts in separate container tabs

If you’re using multiple accounts, https://granted.dev/ is an awesome tool to federate into multiple accounts on the same browser at the same time.

Here’s how Granted CLI works. Run the assume command in your terminal and pick which AWS profile to sign in to (in my case, testing):

https://granted.dev/ can make this a lot easier.

That is really nice! I currently use AWS Extend Switch Roles extension[1] to switch profiles, but an automated way to confine those roles to their own profiles would be very neat.

[1] https://github.com/tilfinltd/aws-extend-switch-roles

AWS Extend Switch Roles Chrome browser extension

Use the AWS Extend Switch Roles extension, perhaps: https://github.com/tilfinltd/aws-extend-switch-roles?

I'm a big fan of using the AWS extend switch roles extension which allows you to easily switch AWS roles when using the management console in your browser.

🎚 aws-extend-switch-roles is an extension to Chrome and Firefox that give you show all of the switch roles from a browse menu by loading your AWS configuration.