assume-aws-environment-variables/src/main.js

Sets AWS environment variables with credentials from an assumed role. Useful for use with Claudia.js

const { execSync } = require('child_process');
const EOL = require('os').EOL;
const AWS = require('aws-sdk');
const roleArn = process.argv[2];
const durationSeconds = process.argv[3] || 3600;
const roleSessionName = process.argv[4] || "hack";
const params = {
  DurationSeconds: durationSeconds,
  RoleArn: roleArn,
  RoleSessionName: roleSessionName,
};

const unsetAwsAccessKeyId = "unset AWS_ACCESS_KEY_ID";
const unsetAwsSecretAccessKey = "unset AWS_SECRET_ACCESS_KEY";
const unsetAwsSessionToken = "unset AWS_SESSION_TOKEN";

execSync(unsetAwsAccessKeyId);
execSync(unsetAwsSecretAccessKey);
execSync(unsetAwsSessionToken);

console.log(
  [
    '#!/bin/bash',
    unsetAwsAccessKeyId,
    unsetAwsSecretAccessKey,
    unsetAwsSessionToken,
    '',
  ].join(EOL)
);

const sts = new AWS.STS();
sts.assumeRole(params).promise()
  .then((response) => {
    console.log(
      [
        `export AWS_SECRET_ACCESS_KEY=${response.Credentials.SecretAccessKey};`,
        `export AWS_ACCESS_KEY_ID=${response.Credentials.AccessKeyId};`,
        `export AWS_SESSION_TOKEN=${response.Credentials.SessionToken};`,
      ].join(EOL)
    );
  })
  .catch((error) => {
    console.error(error);
  })
;