code-dumps/py/aws-assume-role.py

17 lines
664 B
Python
Raw Normal View History

2024-02-22 15:37:33 +08:00
from typing import NoReturn
2023-03-29 14:07:45 +08:00
import json
import boto3
import base64
2024-02-22 15:37:33 +08:00
def lambda_handler(event, context) -> NoReturn:
2023-03-29 14:07:45 +08:00
# TODO implement
sts_client = boto3.client('sts')
assumed_role_object=sts_client.assume_role(
RoleArn="arn:aws:iam::111122223333:role/SomeRole",
RoleSessionName="lambda-assumeRoleMs"
)
print("export AWS_ACCESS_KEY_ID=" + assumed_role_object['Credentials']['AccessKeyId'])
print("export AWS_SECRET_ACCESS_KEY=" + assumed_role_object['Credentials']['SecretAccessKey'])
print("export AWS_SESSION_TOKEN=" + assumed_role_object['Credentials']['SessionToken'])
print("export AWS_DEFAULT_REGION=ap-east-1")