jenv VS aws-vault

https://github.com/jenv/jenv to switch among multiple Java versions

I would recommend https://www.jenv.be/

Look at the https://www.jenv.be/ configure section and add the Java location where Homebrew installed your java. If I remember correctly, it should be somewhere in /usr/local/Cellar/openjdk/**

On my case I prefer use jenv (which is available on aur)

You might like jenv

There are a handful of different ways to temporarily swap out Java versions. In this case, you could probably edit the start scripts to point directly to the path for the Java version you want to use (instead of just "java" which is most likely referring to the most recent). I was already using jEnv for other things, so I configured it so JRE 1.6 would be used in my Nullpomino directory, and the latest JRE would be used everywhere else.

I like jenv for that. You can have a java version set per-project, systemwide, shell session, etc.

I don’t know if this is the “correct” way, but if you are Unix based I would recommend jenv. This is a Java environment manager, similar to pyenv if you know it. Using this tool you can easily switch from one installed version to another. It makes managing Java versions a bliss.

Undying fondness for aws-vault to securely cache my session credentials.

you might want to check https://github.com/99designs/keyring and https://github.com/99designs/aws-vault

You install aws-vault (https://github.com/99designs/aws-vault), configure it according to the README and make sure you have an SSO entry that is compatible, i.e.:

I use a aws-vault to switch thought all profiles on all aws account. It support SSO with 2FA.

Nice! Do I understand this correctly?

You use aws-vault(https://github.com/99designs/aws-vault) and configure it with IAM and MFA with YubiKeys. You configure e.g. the profile jonsmith.

When you run

aws-vault exec jonsmith -- aws s3 ls

it will ask you, e.g. every hour to confirm with YubiKeys and cache the key for one hour. After that the temporary keys expire. Can you also store keys different from AWS?

Don't know about kube, but awscli and a few others decouple the idea of getting credentials and doing the actions. You can use the password every time, but a better way is to either use the preconfigured profile or some wrapper which does use the keychain. For example https://github.com/99designs/aws-vault/ supports one-off commands and shell sessions with pre-populated tokens.

It sounds like you have AWS SSO enabled and need a way to run scripts manually in the terminal. Take a look at the aws-vault project that makes it easy working with multiple AWS accounts.

A tool called aws-vault can fix the "insecure" part.

Take a look at aws-vault, which has support for SSO and running in a docker container.

I read the docs on: https://github.com/99designs/aws-vault