AWS Hop

Switch AWS console accounts in one click: IAM users, Switch Role, IAM Identity Center and SAML, with a production guard.

AWS Hop switches between your AWS console accounts in one click, and marks every console tab with the account it is in, so production never looks like a sandbox. It never asks for a password, an access key or a session token. Every sign-in still happens on AWS's own pages; AWS Hop only knows where to send you. Sign-in methods - IAM user sign-in: opens your account's sign-in page with the account filled in - Switch Role: opens the Switch Role page with the account, role, display name and color filled in - IAM Identity Center (SSO): opens the console through your access portal, on both awsapps.com and app.aws portals - Custom URL: any sign-in link, such as an IdP-initiated SAML link from Okta, Entra ID or Google Workspace Account guard - A colored stripe and label on every AWS console page, showing which account and role the tab is in - Protected accounts get a red frame and their name in front of the tab title - Accounts you have not added get a gray label, and the popup offers to add them Your accounts, your labels - Free-form tags (prod, qa, a project name), a color per project and a protected flag - Type to filter in the popup, then arrow keys and Enter; Alt+Shift+A opens it - Import from ~/.aws/config, one entry per account however many profiles point at it, or from a JSON export - A ready-to-copy command for macOS, Windows (PowerShell) and Linux that looks up the account ID of every AWS CLI profile - Accounts sync across your Chrome browsers - English and Korean Privacy - Stores only the account names, account IDs, role names, portal URLs and labels you enter, in Chrome sync storage - No network requests, no analytics, no server - Open source: https://github.com/somaz94/aws-hop-google-extension AWS Hop is not affiliated with or endorsed by Amazon Web Services.