inquirer.jsを使用してCLI上でAssumeRoleできるカスタムコマンドを作成してみた

mkdir inquirerjs-assumerole
cd inquirerjs-assumerole
npm init

npm i @inquirer/prompts

const { select, input } = require('@inquirer/prompts');
const { exec } = require('child_process');
const fs = require('fs');
const util = require('util');

const execPromise = util.promisify(exec);

// profileの一覧の名前を取得（例：[profile dev] => dev）
async function getProfiles() {
  const configFile = `${process.env.HOME}/.aws/config`;
  const content = fs.readFileSync(configFile, 'utf8');
  return content.match(/\[profile\s(.+)\]/g).map(line => line.match(/\[profile\s(.+)\]/)[1]);
}

async function assumeRole() {
  try {
    const profiles = await getProfiles();

    // プロファイルを選択する
    const profile = await select({
      message: 'Which profile do you want to use?',
      choices: profiles.map(p => ({ value: p, name: p }))
    });

    // MFAコードを入力する
    const mfaCode = await input({
      message: 'Enter your MFA code:'
    });

    const { stdout: roleArn } = await execPromise(`aws configure get role_arn --profile ${profile}`);
    const { stdout: serialNumber } = await execPromise(`aws configure get mfa_serial --profile ${profile}`);
    const { stdout: sourceProfile } = await execPromise(`aws configure get source_profile --profile ${profile}`);
    const { stdout: region } = await execPromise(`aws configure get region --profile ${profile}`);

    const date = Math.floor(Date.now() / 1000);

    const { stdout: output } = await execPromise(`aws sts assume-role \
      --role-arn ${roleArn.trim()} \
      --serial-number ${serialNumber.trim()} \
      --role-session-name ${date}-session \
      --profile ${sourceProfile.trim()} \
      --duration-seconds 3600 \
      --token-code ${mfaCode}`);

    const credentials = JSON.parse(output).Credentials;

    const envScript = `
    export AWS_ACCESS_KEY_ID=${credentials.AccessKeyId}
    export AWS_SECRET_ACCESS_KEY=${credentials.SecretAccessKey}
    export AWS_SESSION_TOKEN=${credentials.SessionToken}
    export AWS_DEFAULT_REGION=${region.trim() || 'ap-northeast-1'}
    `;

    fs.writeFileSync('aws-env.sh', envScript);

    console.log(`${profile} profile is set.`);
    console.log('You can now use AWS CLI with the assumed role.')

  } catch (error) {
    console.error('An error occurred:', error);
  }
}

assumeRole();

# aws assume role(aar)するための関数
function aar() {
  node /Users/username/inquirerjs-assumerole/index.js
  if [ -f aws-env.sh ]; then
    source aws-env.sh
    rm aws-env.sh
  fi
}