{
  "description": "Log in to a SAML identity provider for temporary AWS credentials, or run a command with them. Provider-specific login flags (Okta, OneLogin, F5 APM) are left out.",
  "name": "saml2aws",
  "subcommands": [
    {
      "name": "login",
      "description": "Login to a SAML 2.0 IDP and convert the SAML assertion to an STS token.",
      "options": [
        {
          "names": [
            "--idp-account",
            "-a"
          ],
          "description": "IDP account",
          "args": {
            "name": "idp_account",
            "isOptional": false
          }
        },
        {
          "names": [
            "--profile",
            "-p"
          ],
          "description": "Profile that receives the temporary credentials.",
          "args": {
            "name": "profile",
            "description": "Profile that receives the temporary credentials.",
            "isOptional": false
          }
        },
        {
          "names": [
            "--role"
          ],
          "description": "Role ARN",
          "args": {
            "name": "role",
            "isOptional": false
          }
        },
        {
          "names": [
            "--session-duration"
          ],
          "description": "Session duration (seconds)",
          "args": {
            "name": "session_duration",
            "isOptional": false
          }
        },
        {
          "names": [
            "--force"
          ],
          "description": "Refresh credentials even if not expired."
        },
        {
          "names": [
            "--skip-prompt"
          ],
          "description": "Skip prompts"
        },
        {
          "names": [
            "--skip-verify",
            "-s"
          ],
          "description": "Skip certificate verification"
        }
      ]
    },
    {
      "name": "exec",
      "description": "Exec the supplied command with env vars from STS token.",
      "options": [
        {
          "names": [
            "--profile",
            "-p"
          ],
          "description": "AWS profile",
          "args": {
            "name": "profile",
            "isOptional": false
          }
        },
        {
          "names": [
            "--exec-profile"
          ],
          "description": "Profile used for command execution, e.g. for secondary role assumption.",
          "args": {
            "name": "exec_profile",
            "description": "Profile used for command execution, e.g. for secondary role assumption.",
            "isOptional": false
          }
        }
      ],
      "args": [
        {
          "name": "command",
          "isOptional": false,
          "isVariadic": true
        }
      ]
    },
    {
      "name": "console",
      "description": "Console will open the aws console after logging in.",
      "options": [
        {
          "names": [
            "--profile",
            "-p"
          ],
          "description": "AWS profile",
          "args": {
            "name": "profile",
            "isOptional": false
          }
        },
        {
          "names": [
            "--force"
          ],
          "description": "Force refresh"
        },
        {
          "names": [
            "--link"
          ],
          "description": "Present a link instead of opening the browser."
        }
      ]
    }
  ]
}