shonindocs

Use AWS

Console access

Console access, in the dashboard, lists the accounts and permission sets assigned to you, also on accounts delegated to your Shonin org. Refresh updates the list.

#Open the console

Choose Open console on a row: the AWS console opens on that account, with that permission set. The session lasts one hour.

You confirmed your second factor when you signed in, so the console does not ask again for 8 hours. See Second factor.

#Access keys

Access keys, next to Open console, opens a page for that account and permission set:

  • Set up the AWS CLI and SDKs: the shonin login command to paste in a terminal, for every assignment or only this one. It writes AWS CLI profiles that last 8 hours. See Command line and SDKs.
  • Or set these variables: temporary credentials for macOS and Linux, Windows and PowerShell, valid one hour.

#In AWS CloudTrail

Every session appears as assumed-role/shonin-<Shonin org>-<permission set>/<email>: the email of the person is the name of the session.

View as Markdown