A CLI application which provides the world’s best developer UX for finding and accessing cloud roles to multiple cloud accounts, fast!
Join our Slack community | GitHub | Docs
November 6, 2023
--chain flag for Inline Role Assumption
You can now use the new --chain flag to assume another role inline. This feature can be utilized in conjunction with either the --exec option or as part of a regular profile definition.
assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example --exec -- aws sts get-caller-identity
or
assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example
DefaultExportAllEnvVar config
You can now include the DefaultExportAllEnvVar=true configuration in your ~/.granted/config file. This configuration will enable the automatic export of all environment variables by default when credential_process is used.
ExportCredsToAWS config
You can also include the ExportCredsToAWS=true configuration in your ~/.granted/config file. This will enable credentials to be exported to ~/.aws/credentials by default.
Full release notes available here.
October 17, 2023
Added support for Waterfox browser
Granted now supports Waterfox, thanks to @dowster! Run granted browser set and choose the option to update your browser preference.
Auto refresh for assuming roles that use Credential Process
We've introduced automatic credential refresh when assuming roles that use the credential process. Now by default, we export only the AWS_PROFILE environment variable. If you want to export all variables, you can use the --export-all-env-vars flag when running assume.
Full release notes available here.
October 10, 2023
Preserves Formatting in .aws/config
s3 =
max_concurrent_requests = 100
max_queue_size = 10000
Readded the no-credential-process Flag
no-credential-process flag has been reinstated in the granted sso populate command. We apologize for its accidental removal.Full release notes available here.
September 20, 2023
New Granted Cache Commands
granted cache clear allows you to remove cached credentials securely, and granted cache list lets you view the available cached credentials along with their storage type.Deprecation of Region Flag in Granted SSO Commands
--region, we have officially deprecated the use of the --region flag in Granted SSO commands. Please transition to using the sso-region flag instead. In an upcoming release of Granted, the -region flag will be repurposed to specify the 'region' field in generated profiles.Added Authentication Code Display
Full release notes available here.
September 13, 2023
Added Support for Arc and Firefox Developer Edition
granted browser set and choose the option to update your browser preference.Caching IAM credentials and flag to pass MFA token code
For those using an AWS profile that requires an MFA prompt, Granted will now cache your credentials, eliminating the need to repeatedly enter the MFA token code as long as the cached credentials remain valid.
Moreover, if you can obtain an MFA token through a script, you can now utilize the mfa-token flag with assume to bypass the MFA prompt like assume dev --mfa-token 123456
Support for specific browser profiles
--browser-profile flag for supported browsers such as Chrome, Edge, and Chromium Variants. Try assume profile-name -c --browser-profile "<your_browser_profile>"Full release notes available here.
September 7, 2023
Autocompletion Feature with Service and Region Argument Support
assume -c <tab>. We've now addressed this issue, and the profile autocompletion is now independent of the positional argument to the assume command. [Demo Video]Support for --exec Flag with Double Dash (--) Prefix
--exec flag with a double dash (--) prefix to execute more complex commands that involve quotations. Use the following syntax: assume <profile_name> --exec -- cmd arg...to run your command.Customize AWS Configuration and Credentials File Locations
$AWS_CONFIG_FILE and $AWS_SHARED_CREDENTIALS_FILE environment variables to configure these file locations according to your preferences.Full release notes available here.