Contents

## How It Works

The wrapper `aws-mfa-secure session` command uses [sts.get_session_token](https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/STS/Client.html#get_session_token-instance_method) to fetch temporary session AWS access tokens.

The tokens get saved to `~/.aws/aws-mfa-secure-sessions/AWS_PROFILE` and are then used to set the environment variables, which take the [higher precedence](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#config-settings-and-precedence).

* AWS_ACCESS_KEY_ID
* AWS_SECRET_ACCESS_KEY
* AWS_SESSION_TOKEN

The arguments are delegate the to the `aws` command.  So:

    aws-mfa-secure session s3 ls

Is the same as:

    aws s3 ls

Except using the session environment `AWS_*` variables values.

Version data entries

17 entries across 17 versions & 1 rubygems

Version	Path
aws-mfa-secure-0.4.5	docs/how-it-works.md
aws-mfa-secure-0.4.4	docs/how-it-works.md
aws-mfa-secure-0.4.3	docs/how-it-works.md
aws-mfa-secure-0.4.2	docs/how-it-works.md
aws-mfa-secure-0.4.1	docs/how-it-works.md
aws-mfa-secure-0.4.0	docs/how-it-works.md
aws-mfa-secure-0.3.8	docs/how-it-works.md
aws-mfa-secure-0.3.7	docs/how-it-works.md
aws-mfa-secure-0.3.6	docs/how-it-works.md
aws-mfa-secure-0.3.5	docs/how-it-works.md
aws-mfa-secure-0.3.4	docs/how-it-works.md
aws-mfa-secure-0.3.3	docs/how-it-works.md
aws-mfa-secure-0.3.2	docs/how-it-works.md
aws-mfa-secure-0.3.1	docs/how-it-works.md
aws-mfa-secure-0.3.0	docs/how-it-works.md
aws-mfa-secure-0.2.0	docs/how-it-works.md
aws-mfa-secure-0.1.0	docs/how-it-works.md