assume-role-write-properties.py 文件源码

def main():
    args = parse_args()
    set_logging_level(args.quiet, args.verbose)
    log.debug('Args: %r', args)

    session = boto3.Session(profile_name=args.profile)
    exported_keys = [
        'AccessKeyId', 'SecretAccessKey', 'SessionToken', 'Expiration',
    ]

    sts = session.client('sts')
    assumed_role = sts.assume_role(
        RoleArn         = args.role,
        RoleSessionName = args.session_name,
    )
    credentials = assumed_role.get('Credentials', {})
    credentials['Expiration'] = credentials['Expiration'].isoformat()

    out = sys.stdout if args.output is None else open(args.output, 'w')

    for k in exported_keys:
        out.write('{0}={1}\n'.format(k, credentials.get(k)))