awsmfa 0.3.2

The automation tool for Multi-Factor Authentication (MFA) process to use awscli.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

use awsmfa::aws::{AwsConfigs, GetSessionToken};
use awsmfa::{cmd, get_otp, MfaConfig, Result};
use clap::Parser;

#[derive(Parser)]
#[command(name = "awsmfa")]
#[command(author, version, about, long_about = None)]
struct Cli {
    /// Profile name executing mfa action for.
    #[arg(short, long)]
    profile: Option<String>,

    /// Duration seconds that the credentials should remain valid.
    #[arg(short, long)]
    duration: Option<i32>,

    /// Commands to read or write config file.
    #[command(subcommand)]
    command: Option<cmd::Commands>,
}

#[tokio::main]
async fn main() {
    if let Err(err) = run().await {
        eprintln!("{err}");
        std::process::exit(1);
    }
}

async fn run() -> Result<()> {
    let cli = Cli::parse();

    let config = MfaConfig::new()?;

    match &cli.command {
        Some(cmd::Commands::Ls) => cmd::ls::run(config),
        Some(cmd::Commands::Set(args)) => cmd::set::run(config, args),
        Some(cmd::Commands::Otp(args)) => cmd::otp::run(config, args),
        Some(cmd::Commands::Rm(args)) => cmd::rm::run(config, args),
        None => {
            let opt_profile = cli.profile;
            let opt_duration = cli.duration;
            let profile = &opt_profile.clone().unwrap_or("default".to_string());

            let mfa_profile = &format!("{profile}-mfa");
            let aws_configs = AwsConfigs::new()?;

            let serial_number = aws_configs.mfa_serial(profile)?;
            let token_code = get_otp(&config, profile)?;

            let sts_cred = GetSessionToken::new()
                .set_profile(opt_profile)
                .set_duration_seconds(opt_duration)
                .set_serial_number(Some(serial_number))
                .set_token_code(Some(token_code))
                .send()
                .await?;

            let expiration = sts_cred.expiration();

            aws_configs
                .set_cred(profile, mfa_profile, sts_cred)
                .and_then(|conf| conf.save())?;

            println!("New credentials is available as profile \"{mfa_profile}\".");
            println!("It is valid until {expiration}.");

            Ok(())
        }
    }
}