A CLI application which provides the world’s best developer UX for finding and accessing cloud roles to multiple cloud accounts, fast!
Join our Slack community | GitHub | Docs
November 6, 2023
--chain
flag for Inline Role Assumption
You can now use the new --chain
flag to assume another role inline. This feature can be utilized in conjunction with either the --exec
option or as part of a regular profile definition.
assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example --exec -- aws sts get-caller-identity
or
assume <base-profile> --chain arn:aws:iam::12345678912:role/aws-example
DefaultExportAllEnvVar config
You can now include the DefaultExportAllEnvVar=true
configuration in your ~/.granted/config
file. This configuration will enable the automatic export of all environment variables by default when credential_process is used.
ExportCredsToAWS config
You can also include the ExportCredsToAWS=true
configuration in your ~/.granted/config
file. This will enable credentials to be exported to ~/.aws/credentials
by default.
Full release notes available here.
October 17, 2023
Added support for Waterfox browser
Granted now supports Waterfox, thanks to @dowster! Run granted browser set
and choose the option to update your browser preference.
Auto refresh for assuming roles that use Credential Process
We've introduced automatic credential refresh when assuming roles that use the credential process. Now by default, we export only the AWS_PROFILE
environment variable. If you want to export all variables, you can use the --export-all-env-vars flag
when running assume.
Full release notes available here.
October 10, 2023
Preserves Formatting in .aws/config
s3 =
max_concurrent_requests = 100
max_queue_size = 10000
Readded the no-credential-process
Flag
no-credential-process
flag has been reinstated in the granted sso populate
command. We apologize for its accidental removal.Full release notes available here.
September 20, 2023
New Granted Cache Commands
granted cache clear
allows you to remove cached credentials securely, and granted cache list
lets you view the available cached credentials along with their storage type.Deprecation of Region Flag in Granted SSO Commands
--region
, we have officially deprecated the use of the --region
flag in Granted SSO commands. Please transition to using the sso-region
flag instead. In an upcoming release of Granted, the -region
flag will be repurposed to specify the 'region' field in generated profiles.Added Authentication Code Display
Full release notes available here.
September 13, 2023
Added Support for Arc and Firefox Developer Edition
granted browser set
and choose the option to update your browser preference.Caching IAM credentials and flag to pass MFA token code
For those using an AWS profile that requires an MFA prompt, Granted will now cache your credentials, eliminating the need to repeatedly enter the MFA token code as long as the cached credentials remain valid.
Moreover, if you can obtain an MFA token through a script, you can now utilize the mfa-token
flag with assume
to bypass the MFA prompt like assume dev --mfa-token 123456
Support for specific browser profiles
--browser-profile
flag for supported browsers such as Chrome, Edge, and Chromium Variants. Try assume profile-name -c --browser-profile "<your_browser_profile>"
Full release notes available here.
September 7, 2023
Autocompletion Feature with Service and Region Argument Support
assume -c <tab>
. We've now addressed this issue, and the profile autocompletion is now independent of the positional argument to the assume
command. [Demo Video]Support for --exec
Flag with Double Dash (--) Prefix
--exec
flag with a double dash (--) prefix to execute more complex commands that involve quotations. Use the following syntax: assume <profile_name> --exec -- cmd arg...
to run your command.Customize AWS Configuration and Credentials File Locations
$AWS_CONFIG_FILE
and $AWS_SHARED_CREDENTIALS_FILE
environment variables to configure these file locations according to your preferences.Full release notes available here.