tilfinltd / aws-extend-switch-roles

Extend your AWS IAM switching roles by Chrome extension, Firefox add-on, or Edge add-on
https://chromewebstore.google.com/detail/aws-extend-switch-roles/jpmkfafbacpgapdghgdpembnojdlgkdl?utm_source=github
MIT License
1.33k stars 140 forks source link

Enhancement Request - Container Tabs configuration #217

Open acahill opened 3 years ago

acahill commented 3 years ago

Hi

I'm a huge fan of this extension, and I use it in combination with the Firefox Multi-Account Containers addon. It's great because I work with about ten different roles, so I made a container for each one:

image

image

That way I can just open a new tab with the right container, log in, and switch to the right role. Handy! Anyway, I was thinking it'd be pretty neat if the aws-extend-switch-roles addon had a configuration item to link a profile to a particular tab container, e.g.

[profile example-role]
role_arn=arn:aws:iam::123456789012:role/ExampleRole
color = 0080ff
container_tab = ExampleRoleContainer

I'm not sure how the next part would work though. If the automatically assume last assumed role feature was re-enabled then it could be integrated with that i.e. automatically assume the last assumed role in the current container. That might not even need a container_tab config option, but I don't know whether the option is coming back.

If it isn't coming back, maybe the container_tab option could be useful. Maybe the extension could open a tab with the right container, and automatically switch after login?

I'm not really sure, but I could have a go at implementing some of it myself if you think it's a good idea. There is an extension API that exposes the necessary container tab info, but it'd be necessary to add the "contextualIdentities" permission to the manifest.json to use it. What do you think?

rirze commented 2 weeks ago

I think it was already done here: https://github.com/tilfinltd/aws-extend-switch-roles/pull/131 But it was closed because it referred to the automatically assume last assumed role feature, which @tilfin, within in his rights, did not want to support. It could be possible to get the other functionality implemented however.

I would love to see this merged in-- if no one else want to try, I can (albeit with my limited knowledge in this space)