search

mozilla-iam / mozilla-aws-cli

DEPRECATED. A command line tool to allow users to log into AWS with their federated identity using Single Sign On and obtain ephemeral API keys. This is no longer in use in Mozilla SSO/IAM, as of September 15th, 2023.
Mozilla Public License 2.0
20 stars 8 forks source link

maws and Firefox Containers #213

Open gene1wood opened 4 years ago

gene1wood commented 4 years ago

Add something that talks about how you can use containers withmaws

Containerise

You can use patterns like this in containerise to open different AWS accounts in different containers but this doesn't apply if you use the role menu

@https://aws\.sso\.mozilla\.com/\?.*account=infosec-prod&.*$, AWS infosec-prod
@https://aws\.sso\.mozilla\.com/\?.*account=infosec-dev&.*$, AWS infosec-dev

This is for https://github.com/mozilla-iam/federated-aws-rp

I suspect for both command line and web if containerise will support a match like this

@https://signin\.aws\.amazon\.com/federation?.*Issuer=https%3A%2F%2Faws\.sso\.mozilla\.com%2F%3Faccount%3Dinfosec-prod%26role%3DMAWS-Admin.*$, AWS infosec-prod

Then the AWS web console should open in a container. I'm not seeing this work though, maybe because containerise doesn't work on 302 redirects? I feel like it should. Do these / characters in the URL need to be escaped?

Open external links in a container

Alternatively do we look into emitting schemes like the ones in this (if the user doesn't use the role menu)?

https://addons.mozilla.org/en-US/firefox/addon/open-url-in-container/