break-glass

README

break-glass

break-glass is a simple tool to manage short lived AWS credentials.

It will assume roles (optionally) with MFA authentication and save those temporary credentials to an AWS profile.

Usage

break-glass is configured with an additional config file in the ~/.aws directory ~/.aws/break-glass

e.g.

[admin]
aws_role_arn =  arn:aws:iam::012345678901:role/Admin
aws_mfa_device = arn:aws:iam::012345678901:mfa/iphone
duration = 3600

When break-glass is run, if a MFA device is configured it will request a token, then temporary credentials for the named role(s) will be written to the ~/.aws/credentials file.