From bb5bd628b7875509261f1a6995d55c4e73b28bfe Mon Sep 17 00:00:00 2001 From: Yurii Rochniak Date: Thu, 3 Oct 2019 09:59:00 +0200 Subject: [PATCH] aws-google-auth: add page (#3287) --- pages/common/aws-google-auth.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 pages/common/aws-google-auth.md diff --git a/pages/common/aws-google-auth.md b/pages/common/aws-google-auth.md new file mode 100644 index 0000000000..17698ad8e9 --- /dev/null +++ b/pages/common/aws-google-auth.md @@ -0,0 +1,20 @@ +# aws-google-auth + +> Command line tool to acquire AWS temporary (STS) credentials using Google Apps as a federated (Single Sign-On) provider. +> More information: . + +- Login with Google SSO using the IDP and SP identifiers and set the credentials duration to one hour: + +`aws-google-auth -u {{example@example.com}} -I {{$GOOGLE_IDP_ID}} -S {{$GOOGLE_SP_ID}} -d {{3600}}` + +- Login [a]sking which role to use (in case of several available SAML roles): + +`aws-google-auth -u {{example@example.com}} -I {{$GOOGLE_IDP_ID}} -S {{$GOOGLE_SP_ID}} -d {{3600}} -a` + +- Resolve aliases for AWS accounts: + +`aws-google-auth -u {{example@example.com}} -I {{$GOOGLE_IDP_ID}} -S {{$GOOGLE_SP_ID}} -d {{3600}} -a --resolve-aliases` + +- Show help information: + +`aws-google-auth -h`