AWS CLI Login Builder

The AWS CLI Login Builder generates credential artifacts from provided AWS access key values and optional session data. It is designed for developers, DevOps engineers, and security teams who automate access to multiple AWS accounts for CLI workflows, testing, and automation tasks. The tool outputs ready-to-run shell commands or credentials blocks when inputs are supplied, without exposing secrets in transit.\n\nCore operation includes input validation, defaulting, and conditional branching for role-based access. Required inputs are aws_access_key_id, aws_secret_access_key, and region. Optional inputs include aws_session_token, mfa_serial, mfa_code, role_arn, duration_seconds, and profile_name. If role_arn is provided, the builder describes the STS assume-role flow and calculates expiry, defaulting to 3600 seconds when duration_seconds is omitted. MFA is integrated when both serial and code are present. No API calls are made or secrets stored by the tool.\n\nOutputs and formats include a shell-export sequence (export AWS_ACCESS_KEY_ID=...; export AWS_SECRET_ACCESS_KEY=...; export AWS_SESSION_TOKEN=...) or a credentials block for a named profile in the AWS CLI config file. The generated artifacts are intended to be pasted into a secure session or script and can be re-used across machines or automation jobs. Typical use cases include ephemeral CI/CD credentials, local development against multiple accounts, and cross-account data access.\n\nDifferentiators and limitations: deterministic formatting, explicit handling of sensitive values (with sample redaction if inputs are omitted), and clear guidance on required inputs and failure modes. It supports basic and advanced scenarios (with or without MFA and role assumption) and provides fail-safe messages for invalid data. It does not perform network requests or store credentials beyond the immediate output.