SAML to AWS STS Keys Conversion
Item media 1 screenshot

Overview

Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API.

Google Chrome Extension which converts a SAML 2.0 assertion to AWS STS Keys (temporary credentials -> AccessKeyId, SecretAccessKey and SessionToken). ### Why this Chrome Extension? ### If you don't have any user administration setup within AWS Identity & Access Management (IAM) but instead rely on your corporate user directory, i.e. Microsoft Active Directory. Your company uses a SAML 2.0 Identity Provider (IDP) to log in to the AWS Web Management Console (Single Sign On). Then this Chrome Estension if for you! You run into trouble as soon as you would like to execute some fancy scripts from your computer which calls the AWS API's. When sending a request to the AWS API's you need credentials, meaning an AccessKey and SecretKey. You can easily generate these keys for each user in AWS IAM. However, since you don't have any users in AWS IAM and don't want to create users just for the sake of having an AccessKey and SecretKey you are screwed. But there is a way to get temporary credentials specifically for your corporate identity. The Security Token Service (STS) from AWS provides an API action assumeRoleWithSAML. Using the SAML Assertion given by your IDP the Chrome Extension will call this API action to fetch temporary credentials. (AccessKeyId, SecretAccessKey and SessionToken). This way there is no need to create some sort of anonymous user in AWS IAM used for executing scripts. This would be a real security nightmare, since it won't be possible to audit who did what. This Chrome Extension however will make it super easy for you to just use your corporate identity for executing scripts calling AWS API's.

3.9 out of 510 ratings

Google doesn't verify reviews. Learn more about results and reviews.

Review's profile picture

Shubham GuptaDec 19, 2022

There is an issue in latest version 3.1, in script.js file inside "onBeforeRequestEvent" function "sessionduration" is not defined because of that it is not working please fix this asap.

2 out of 2 found this helpful
Review's profile picture

Praveen DumpalaDec 16, 2022

The latest version v3.0 release on 2022-Dec-15 is not working, please test and fix it. Not able to download credentials file.

8 out of 8 found this helpful
Replier's profile picture

Gerard LaanDeveloperDec 18, 2022

@Praveen Dumpala This has been fixed in v3.1. Check out: https://github.com/prolane/samltoawsstskeys/issues/58 Please report an issue on Github next time you experience any issues. Thanks for using this Chrome extension. Cheers!

Review's profile picture

Alexander CarlsonSep 21, 2020

Excellent!

Details

  • Version
    3.3
  • Updated
    March 20, 2023
  • Offered by
    prolane.org
  • Size
    157KiB
  • Languages
    English
  • Developer
    Email
    gtclaan.com@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

The developer has disclosed that it will not collect or use your data.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Related

Console Recorder for AWS

4.5(12)

Records actions made in the AWS Management Console and outputs the equivalent CLI/SDK commands and CloudFormation template.

SAML Message Decoder

4.3(31)

Collects and displays SAML messages

SAML-tracer

4.3(30)

A debugger for viewing SAML messages

AWS Sidebar

4.0(4)

AWS Console Navigation Sidebar for Chrome

AWS SAML Keys

0.0(0)

Generate AWS access keys from a SAML login to the AWS console.

SAML to AWS STS Keys Conversion Multi Profile

0.0(0)

Generates credential/config file with multiple AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0).

aws-launcher

4.5(4)

The easiest way to launch the console page of AWS services

Chrome AWS SAML Token Expiry Reminder

5.0(3)

Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.

SAML Assertion to AWS STS Assumption

0.0(0)

Assumes an STS role and produces usable session credentials for CLI tools from an intercepted SAML assertion

CloudKeeper - Credential Helper

4.0(2)

AWS SSO External AWS Account - STS Keys Generator

AWS Extend Switch Roles

4.9(82)

Extend your AWS IAM switching roles. You can set the configuration like aws config format

idpawssamlinterceptor

5.0(1)

This extention intercepts SAML workflow between your IDP (e.g Okta) and AWS and generates of AWS CLI creds

Console Recorder for AWS

4.5(12)

Records actions made in the AWS Management Console and outputs the equivalent CLI/SDK commands and CloudFormation template.

SAML Message Decoder

4.3(31)

Collects and displays SAML messages

SAML-tracer

4.3(30)

A debugger for viewing SAML messages

AWS Sidebar

4.0(4)

AWS Console Navigation Sidebar for Chrome

AWS SAML Keys

0.0(0)

Generate AWS access keys from a SAML login to the AWS console.

SAML to AWS STS Keys Conversion Multi Profile

0.0(0)

Generates credential/config file with multiple AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0).

aws-launcher

4.5(4)

The easiest way to launch the console page of AWS services

Chrome AWS SAML Token Expiry Reminder

5.0(3)

Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.

Google apps