AWS SAML to STS

Captures AWS SAML sign-ins and turns them into temporary STS credentials for the AWS CLI and SDKs.

A Google Chrome extension for engineers who authenticate to AWS with SAML 2.0 and want temporary STS credentials they can copy into the AWS CLI or AWS SDK tooling. When you sign in to the AWS console through a SAML identity provider such as Okta, Azure AD, or ADFS, AWS receives a SAML assertion at https://signin.aws.amazon.com/saml. This extension intercepts that assertion, extracts the IAM role details, exchanges the assertion for temporary AWS STS credentials, and makes the credentials available in copy-friendly formats. Federated AWS access often works well in the browser but leaves a gap for local developer workflows. If your organisation uses SAML sign-in for the AWS console, getting short-lived credentials into the CLI or SDKs can still be awkward. This extension closes that gap without adding another service or credential broker.