otty / apps

All apps/Okta AWS CLI

Okta AWS CLI

okta-aws-cli

A command-line tool for authenticating to AWS through Okta.

Runs as okta-aws-cli|macOS, Linux, Windows|github.com

Open form in Otty otty.toml

Command form

ai-draft · 2 tasks · 12 fields

Human web (device authorization) flow. Other commands (m2m, direct), private keys and passwords are outside this form.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui okta-aws-cli

Get AWS credentials via OktaExample values, fixed in this page — nothing here reaches a terminal

Basic

Okta org domain*

string

OIDC client ID*

string

AWS Account Federation app ID

string

Preferred IAM role ARN

string

TasksEach one presets the form for one job

Web login

org_domainoidc_client_idaws_acct_fed_app_idaws_iam_role

Save to credentials file

org_domainoidc_client_idaws_acct_fed_app_idprofilewrite_aws_credentialsformat

ParametersOnly these flags are editable in the form

Okta org domain

For example my-org.okta.com.
string

--org-domain

OIDC client ID

string

--oidc-client-id

AWS Account Federation app ID

string

--aws-acct-fed-app-id

Preferred IAM role ARN

string

--aws-iam-role

AWS region

string

--aws-region

Session duration (seconds)

Between 60 and 43200.
integer

--aws-session-duration

Output format

enum

--formatenv-varaws-credentialsprocess-credentialsnoop

Profile name

string

--profile

Write to AWS credentials file

Overwriting can remove comments and formatting from the credentials file.
boolean

--write-aws-credentials

Cache Okta access token

boolean

--cache-access-token

Display QR code

boolean

--qr-code

Debug output

boolean

--debug

SourcesEvery flag above is checked against these

readme

helpmaster

github.com

Before it fills your prompt, Otty checks the installed okta-aws-cli against its version. A form that does not match your version is not offered.