All apps/okta-awscli

okta-awscli

Runs as okta-awscli|macOS, Linux, Windows|github.com

Command form

ai-draft · 2 tasks · 12 fields

Authenticate to Okta and fetch temporary AWS STS credentials, optionally running an awscli command. Passwords are deliberately not offered as a field.

Opens the form; the finished command lands at your prompt, unrun

Run in Otty

otty gui okta-awscli

Get AWS credentials via OktaExample values, fixed in this page — nothing here reaches a terminal

Basic

AWS profile to write*

string

Okta profile

string

TOTP token

string

Advanced

Force new credentials

--force

TasksEach one presets the form for one job

Write credentials to a profile

profileokta_profileforcetoken

Configure an Okta profile

config

ParametersOnly these flags are editable in the form

AWS profile to write

Without a profile, credentials are printed to the console.
string

--profile-p

Okta profile

string

--okta-profile-o

Okta username

string

--username-U

TOTP token

string

--token-t

Force new credentials

boolean

--force-f

Refresh the AWS role

boolean

--refresh-role-r

Show account aliases

boolean

--lookup-l

Cache credentials

boolean

--cache-c

Verbose output

boolean

--verbose-v

Debug output

boolean

--debug-d

Create an Okta profile

boolean

--config

awscli command

Optional awscli action and arguments to run with the credentials, e.g. iam list-users.
string · positional 0 · repeatable

SourcesEvery flag above is checked against these

readme

`okta-awscli --profile <aws_profile> <awscli action> <awscli arguments>` - `--profile` or `-p` Sets your temporary credentials to a profile in `.aws/credentials`. If omitted and not configured in `~/.okta-aws`, credentials will output to console. - `--username` or `-U` Okta username. - `--force` or `-f` Ignores result of STS credentials validation and gets n…

helpmain

github.com

Before it fills your prompt, Otty checks the installed okta-awscli against its version. A form that does not match your version is not offered.