We have built a simple Java application that generates temporary AWS credentials using AWS STS Assume roles, this enables AWS customers to seamlessly gain access to AWS resources using Okta to as a Single-Sign-On source.
###Setup###
Use git clone https://github.com/nshobayo/AWS-CLI.git to clone the repository locally
###Configuring the application###
It is essential that oktaAWSCLI.config be in the same directory as the oktaAWSCLI.jar file. The oktaAWSCLi config file holds information specific to each org and needs to be configured on an org to org basis.
Your Okta Org and AWS application url need to be added to your configuration file.
OKTA_ORGwhich is the url of your Okta org.OKTA_AWS_APP_URLis the url link of your Okta AWS application url- Obtaining an AWS app url
- Navigate to the
Admin Dashboardof you Okta org - Select the
Applicationtab and click you AWS Application - Under the
Generalmenu, scroll down to find theApp Imbed Linksection - Your link is located under
Embed Link
- Navigate to the
- Replace the example values in
oktaAWSCLI.configwith your values
###Running the application###
- To run the application use the following command while in the directory containing the
.jarfile java -jar oktaAWSCLI.jar