mpljkpamdjfdjmfcpnlmhhakbjigjjcd
If you're using an external AWS account in AWS SSO, there is no way for you to retrieve the CLI credentials for the role. The workaround suggested by AWS is to use AWS CloudShell. This Credential Helper extension allows you to retrieve the CLI credentials by passing the SAML Assertion to AWS Security Token Service. To use this extension: 1. Click on the external AWS account you wish to log into 2. Once the console opens, click on the extension and the popup will appear 3. Your credentials will be available there for you to copy 4. Copy the credentials to your local AWS credentials file 5. Use the AWS CLI from your local machine Note: This extension does not collect any data. The credentials are available to view only once and are deleted once the popup is closed.
CloudKeeper Tuner
CloudKeeper Tuner is your real-time AWS optimization assistant that integrates seamlessly into your AWS console. Designed to help businesses of all sizes maximize cloud efficiency, Tuner provides actionable insights and personalized recommendations to manage costs and eliminate resource waste—all without leaving your console. 📍 Instant Optimization Insights: Receive real-time, contextual recommendations directly within your AWS console. Each suggestion comes with a detailed explanation of its potential impact and value. 📍 Effortless Cost Management: Identify and eliminate unnecessary spending by highlighting underutilized resources and providing clear optimization strategies. 📍 Seamless User Experience: No complex setups or additional software required. Tuner works automatically within your existing AWS workflow. 1. Install the Extension ➤ Download the CloudKeeper-Tuner browser extension from the Chrome Web Store. 2. Log In to Your AWS Account ➤ Open your AWS console and log in using your AWS credentials. 3. Log In to your Tuner Account ➤ Enable the Tuner extension, by entering your CloudKeeper credentials and it will automatically integrate with your AWS console, displaying insights and recommendations tailored to your account. 4. Explore Insights ➤ Navigate your AWS console as usual, and Tuner will highlight cost-saving opportunities, optimization suggestions, and areas for improvement in real time. 5. Take Action ➤ Follow Tuner’s recommendations directly in your console to optimize costs, improve system performance, and strengthen reliability. Managing cloud resources can be daunting, especially in a dynamic AWS environment. Tuner simplifies this process by providing intelligent, actionable insights where you need them most—within your AWS console. By integrating seamlessly into your workflow, Tuner ensures that cloud optimization is no longer a complex task but a strategic advantage.Whether you're managing a startup or an enterprise, Tuner helps align your AWS resources with your unique business goals. Transform the way you manage cloud resources with CloudKeeper-Tuner—effortlessly, intelligently, and immediately. Download CloudKeeper-Tuner today!
AWS Account Labeler
Customize and display labels for different AWS accounts directly on the AWS console. Description: Enhance your AWS experience by displaying customizable labels for different AWS accounts directly on the AWS console. This extension helps you easily distinguish between multiple AWS accounts, making account management simpler and more intuitive. Key Features Customizable Labels: Users can set unique labels for different AWS accounts. Each label can be customized in terms of text, size, font color, and background color with transparency options. Dynamic Styling: The extension allows for dynamic customization of label appearance, including font size, font color, background color, and background transparency. Persistent Storage: Configurations and label positions are stored locally using Chrome's storage API, ensuring that user settings persist across browser sessions. Seamless Integration: The extension integrates seamlessly with the AWS console, displaying labels prominently without interfering with normal operations. Drag-and-Drop Functionality: Users can drag the labels to any position on the page, and the extension will save the label's position for the next session.
SAML to AWS STS Keys Conversion
Generates file with AWS STS Keys after logging in to AWS webconsole using SSO (SAML 2.0). It leverages 'assumeRoleWithSAML' API. Google Chrome Extension which converts a SAML 2.0 assertion to AWS STS Keys (temporary credentials -> AccessKeyId, SecretAccessKey and SessionToken). ### Why this Chrome Extension? ### If you don't have any user administration setup within AWS Identity & Access Management (IAM) but instead rely on your corporate user directory, i.e. Microsoft Active Directory. Your company uses a SAML 2.0 Identity Provider (IDP) to log in to the AWS Web Management Console (Single Sign On). Then this Chrome Estension if for you! You run into trouble as soon as you would like to execute some fancy scripts from your computer which calls the AWS API's. When sending a request to the AWS API's you need credentials, meaning an AccessKey and SecretKey. You can easily generate these keys for each user in AWS IAM. However, since you don't have any users in AWS IAM and don't want to create users just for the sake of having an AccessKey and SecretKey you are screwed. But there is a way to get temporary credentials specifically for your corporate identity. The Security Token Service (STS) from AWS provides an API action assumeRoleWithSAML. Using the SAML Assertion given by your IDP the Chrome Extension will call this API action to fetch temporary credentials. (AccessKeyId, SecretAccessKey and SessionToken). This way there is no need to create some sort of anonymous user in AWS IAM used for executing scripts. This would be a real security nightmare, since it won't be possible to audit who did what. This Chrome Extension however will make it super easy for you to just use your corporate identity for executing scripts calling AWS API's.
AWS AlwaysON
Stay logged in to AWS console and get STS credentials for CLI access. This extension enhances the daily work with AWS when using Google Workspace (formerly GSuite) as it's Identity Provider. Assuming you already have everything configured on both sides, this extension will help you with the following: - Keep your AWS Web Console session refreshed. You will not have to press the AWS link in the Google apps section every hour. - Get temporary STS credentials for CLI access (Replacing tools like aws-google-auth) After installing this extension you need to configure multiple options to get the extension to work properly. Each property has an info tooltip which will explain everything in more detail. This project is completely open source, so you can check it for any security concerns you might have. v1.2.1 - Updater client now supports both Windows and Linux. Check the GIthub page for more info. - You can now select the name of the SAML Provider you set in AWS. It was statically set to 'gsuite' till now. - Default values for options are now set each time you start the extension and not only on the first run.
