Google Chrome Extension which converts a SAML 2.0 assertion to AWS STS Keys (temporary credentials -> AccessKeyId, SecretAccessKey and SessionToken). ### Why this Chrome Extension? ### If you dont have any user administration setup within AWS Identity & Access Management (IAM) but instead rely on your corporate user directory, i.e. Microsoft Active Directory. Your company uses a SAML 2.0 Identity Provider (IDP) to log in to the AWS Web Management Console (Single Sign On). Then this Chrome Estension if for you! You run into trouble as soon as you would like to execute some fancy scripts from your computer which calls the AWS APIs. When sending a request to the AWS APIs you need credentials, meaning an AccessKey and SecretKey. You can easily generate these keys for each user in AWS IAM. However, since you dont have any users in AWS IAM and dont want to create users just for the sake of having an AccessKey and SecretKey you are screwed. But there is a way to get temporary credentials specifically for your corporate identity. The Security Token Service (STS) from AWS provides an API action assumeRoleWithSAML. Using the SAML Assertion given by your IDP the Chrome Extension will call this API action to fetch temporary credentials. (AccessKeyId, SecretAccessKey and SessionToken). This way there is no need to create some sort of anonymous user in AWS IAM used for executing scripts. This would be a real security nightmare, since it wont be possible to audit who did what. This Chrome Extension however will make it super easy for you to just use your corporate identity for executing scripts calling AWS APIs.
You can Follow the below Step By Step procedure to install the SAML to AWS STS Keys Conversion Chrome Extension to your Chrome Web browser.
It is the SAML to AWS STS Keys Conversion Chrome extension download link you can download and install Chrome Browser.
Records actions made in the AWS Management Console and outputs the equivalent CLI/SDK commands and CloudFormation template.
The easiest way to launch the console page of AWS services
Collects and displays SAML messages
A debugger for viewing SAML messages
Extend your AWS IAM switching roles. You can set the configuration like aws config format
Re-authenticate with AWS federated ADFS (SAML) credentials when they expire.