Simple Python library for AWS SSO credential management in local development.
py-aws-sso simplifies obtaining short-term credentials for CLI and Boto3 operations when using AWS SSO during local Python development.
Video detailing the steps of configuring AWS SSO Profile using AWS CLI and using py-aws-sso module are available on YouTube
In our organization developing applications that interact with AWS accounts often requires managing long-term credentials. This can lead to several challenges, including:
py-aws-sso addresses these challenges by providing a simple solution to obtain temporary AWS credentials during local development. By leveraging temporary credentials, developers can:
This simple solution to this problem but piggy backing on AWS CLI v2 tool.
py-aws-sso simplifies obtaining temporary credentials by leveraging the AWS CLI v2 tool. It uses the existing
AWS CLI configuration, and uses boto3
library to retrieve temporary credentials for the specified profile. If you
haven’t already established an SSO login session, py-aws-sso will automatically trigger one for you.
This Python 3 module requires a working installation of the AWS CLI v2 and the boto3
library
Install and Configure AWS CLI v2: Follow the official documentation @ https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html to install and configure AWS CLI v2 with your SSO profiles. For quick video guide see: How to configure AWS CLI so that we can use AWS SSO
pip install py-aws-sso
–or–
pdm add py-aws-sso
local_run.py
file to execute your project using Python.set_aws_creds
from the awssso
module.set_aws_creds
with these arguments:
profile_name
(string): The name of the AWS CLI profile to use.verbose
(boolean, optional): Set to True
to print verbose messages (defaults to False).This project is inspired by the aws-sso-credentials project
. However, it caters specifically to Python developers
and focuses on local development workflows.
from awssso import set_aws_creds
# Assuming your AWS profile name is "my-sso-profile"
set_aws_creds(profile_name="my-sso-profile", verbose=True)
# Now you can use boto3 with the temporary credentials
import boto3
s3_client = boto3.client("s3")
response = s3_client.list_buckets()
print(response)
Example fastapi project is included for quick reference