Skip to main content
100%

Gist df3a4c8340b0fc248e44e04b3a194f60

✓ Published0🌍 Public
Aaharonh
Last edited Oct 1, 2021
Created on Oct 1, 2021

This script automates the renewal of temporary AWS credentials required when MFA is enabled for AWS CLI authentication. It shows the process of exchanging a one-time MFA token for session credentials by calling the AWS STS `get-session-token` API via the `aws` command-line tool. The code uses Python’s `subprocess.run`, `json.loads`, and `configparser` to parse the command output and update the specified `~/.aws/credentials` file with new access key, secret key, and session token. It takes five command-line arguments—start profile, MFA profile, credentials filename, MFA device ARN, and token—and writes the refreshed credentials to the designated profile section.

AI-generated description

this script automates the required update of temporary access credentials required when MFA is configured for aws cli authentication. it is meant to be run each time (cca once a day) the temporary tokens expired so it will renew them. it was tested on both linux and windows with python3. below is a short explanation on how to use.

let's assume you there is an aws profile named 'root' configured for access and you have enabled MFA for aws cli. Then you should add profile called root-mfa in both ~/.aws/config and ~/.aws/credentials as follows:

config

[profile root-mfa]
region = us-east-1
output = json

credentials

[root-mfa]
aws_access_key_id = a
aws_secret_access_key = a
aws_session_token = a

the credentials file root-mfa section will be updated by the script when it is run and supplied valid one-time access token.

place the script aws-mfa-login.py into ~/bin/ or other folder in path, set the current aws profile to root and run

AWS_PROFILE=root; aws-mfa-login.py root root-mfa ~/.aws/credentials arn:aws:iam::137602392568:mfa/aharon.haravon 647239

the parameters are respectively:

  • start aws profile
  • mfa aws profile
  • credentials filename
  • mfa device arn
  • current mfa token token value

now you can use the root-mfa aws profile

Similar vizzes

Loading thumbnail…

Gist f1012aa1f266b2bc8728e37d9df0f3aa

This example demonstrates a file-synchronization workflow for Amazon Web Services, showing how to copy a local folder to a remote S3 bucket using the AWS command-line interface. The visualization centers on the specific command structure, breaking down the `aws s3 sync` syntax into its component parts: the `s3://` protocol prefix, the target bucket URL with domain name, and the local destination folder. It highlights the path construction and parameter ordering required for successful cloud storage synchronization. The code relies on AWS's native CLI tools rather than external JavaScript libraries, presenting the command as a straightforward text-based diagram.

MMistyBlunch
55% match
Loading thumbnail…

Anthropic OAuth CLI - Simplified Claude Code spoof demo

This demo shows a simplified Claude Code spoof that impersonates Anthropic's OAuth flow to harvest user authorization codes. The Python script defines an `AnthropicOAuth` class that generates PKCE challenges, constructs an authorization URL pointing to claude.ai, and exchanges returned codes for access and refresh tokens via the console.anthropic.com token endpoint. It uses the `requests` library for HTTP calls and stores credentials in a local JSON file with restricted permissions, mimicking legitimate CLI authentication behavior.

JJastor11
54% match
Loading thumbnail…

Gist 82c5f73258108bef4df748b8e77ae770

This example shows an AWS Lambda function that automatically downloads trending Twitch clips for a specified game and stores them in an S3 bucket, organized by date. It first queries the Twitch Kraken API for top clips, extracts the MP4 URLs from the thumbnail paths, then downloads each video file to the Lambda’s temporary storage before uploading it to S3. The code uses the `requests` library for HTTP calls, `boto3` for S3 operations, and reads configuration from environment variables. The visualization highlights how serverless functions can automate media archiving pipelines.

CConorAspell
53% match
Loading thumbnail…

Gist 80444441f83babe9e45d8a3166c837ce

This example demonstrates a small automated data-update workflow that refreshes a dataset by running a Python script. It shows how environment variables supply credentials and user identification, which are then passed to an asynchronous update function. The code uses Python’s `asyncio` library to manage the asynchronous task, while `os.environ` retrieves the required secrets from the system environment. The visualization itself is not rendered here; instead, the example focuses on the programmatic data-fetching and update logic, with the actual charting or rendering handled separately by an unspecified front-end tool.

CConorAspell
51% match
Loading thumbnail…

Gist b7a46dea7569df07c3ab2ca8654968ca

This visualization example demonstrates an automated ECS task that runs a Python script in a Fargate container, configured through the AWS CLI and JSON task definition. It shows how infrastructure-as-code defines a containerized workload, using the AWS SDK to launch a task that likely scrapes or processes hill-related data. The configuration specifies the `ecsTaskExecutionRole` IAM role, sets environment variables for mode, email, and password, and uses the `sel-test` Docker image from ECR. The rendering approach is not visual; instead, it focuses on the declarative task definition and container lifecycle, with no d3, Canvas, or Three.js involved.

CConorAspell
51% match
Loading thumbnail…

Gist 5219363

This shell script demonstrates how to map EC2 instances to their environment and server scope by querying the AWS instance metadata service. It uses `curl` to retrieve the instance ID and public hostname from the metadata endpoints at 169.254.169.254, then combines them with the `hostname` command and passes the result to the `ey` CLI tool via SSH. The script supports optional arguments for environment and server scope, defaulting to “stipple_prod” and “--all”, and illustrates a practical command-line workflow for infrastructure diagnostics.

XXXX
50% match
Loading thumbnail…

Gist 562766

This example demonstrates a command-line workflow for authenticating a Twitter user via OAuth and displaying their rate-limit status. It shows the authorization URL, prompts for a PIN, and exchanges it for an access token using the `twitter_oauth` gem. The script then outputs the rate-limit data as YAML and prints the token and secret. It relies on the `TwitterOAuth::Client` class and the `request_token`, `authorize`, and `rate_limit_status` methods, with user input handled through standard input.

XXXX
50% match
Loading thumbnail…

To connect to EC2 env in a SSH Client, the following Gist has to be updated for a specific machine, source and final folders and also the Pub file.

This example shows a shell-based workflow for connecting to an Amazon EC2 instance from an SSH client, including transferring a public key and syncing local folders. It uses command-line tools like `pscp`, `ssh`, `ssh-keygen`, and `scp` to convert a PuTTY key, append the client’s public key to the server’s `authorized_keys`, and copy files via SCP with strict host checking disabled. The gist exposes the necessary commands and file paths that must be edited per machine.

PP7h
50% match