feat: Start of aws-sso-config-generator

Author: djgoku

.formatter.exs

@@ -0,0 +1,4 @@
+# Used by "mix format"
+[
+  inputs: ["{mix,.formatter}.exs", "{config,lib,test}/**/*.{ex,exs}"]
+]

.github/workflows/main.yml

@@ -0,0 +1,23 @@
+name: main
+on:
+  push:
+    branches:
+      - main
+env:
+  DEVBOX_API_TOKEN: ${{ secrets.DEVBOX_API_TOKEN }}
+  GH_TOKEN: ${{ secrets.GH_TOKEN }}
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    if: github.repository_owner == 'djgoku'
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install devbox with empty devbox.json
+        uses: jetify-com/[email protected]
+        with:
+          enable-cache: 'true'
+      - name: upload release artifacts
+        run: |
+          set -x
+          devbox run do-all
+          devbox run version-info

.gitignore

@@ -0,0 +1,31 @@
+# The directory Mix will write compiled artifacts to.
+/_build/
+
+# If you run "mix test --cover", coverage assets end up here.
+/cover/
+
+# The directory Mix downloads your dependencies sources to.
+/deps/
+
+# Where third-party dependencies like ExDoc output generated docs.
+/doc/
+
+# If the VM crashes, it generates a dump, let's ignore it too.
+erl_crash.dump
+
+# Also ignore archive artifacts (built via "mix archive.build").
+*.ez
+
+# Ignore package tarball (built via "mix hex.build").
+aws_sso_config_generator-*.tar
+
+# Temporary files, for example, from tests.
+/tmp/
+
+/burrito_out/
+
+.DS_Store
+
+notes.org
+
+.devbox

README.org

@@ -0,0 +1,103 @@
+#+STARTUP: inlineimages
+
+* AwsSsoConfigGenerator
+
+Tool to generate an AWS config file (~​~/.aws/config~) (our file is saved to ~​~/.aws/config.generated~) after authenticating and authorizing AWS SSO IAM Identity Center.
+
+** Downloads
+
+Available downloads for macOS (x86 and m series), linux (x86 and arm64) and windows.
+
+*** macOS
+
+On macOS you will get a popup if you run without doing the below.
+
+~Apple could not verify “aws-sso-config-generator” is free of malware that may harm your Mac or compromise your privacy.~
+
+#+caption: macOS Apple popup could not verify
+[[file:./images/macos-popup.png]]
+
+**** Allow executable to not be quarantined
+
+Make sure to only do this for verified executable downloaded from https://github.com/djgoku/aws-sso-config-generator or built locally.
+
+#+begin_example
+xattr -dr com.apple.quarantine ~/aws-sso-config-generator
+chmod +x ~/aws-sso-config-generator
+#+end_example
+
+** Usage
+*Note: if no parameters are passed user will be prompted for ~region~ and ~start_url~.*
+
+Example call of ~aws-sso-config-generator~ where AWS access portal is in ~us-west-2~ with a url of ~https://​<example>.awsapps.com/start/#/~.
+
+#+begin_example
+aws-sso-config-generator --region us-west-2 --start-url https://<example>.awsapps.com/start/#/
+#+end_example
+
+#+begin_example
+aws-sso-config-generator -r us-west-2 -u https://<example>.awsapps.com/start/#/
+#+end_example
+
+** Parameters
+
+| Option              | Type   | Example                                   | Description                               |
+|---------------------+--------+-------------------------------------------+-------------------------------------------|
+| --region or -r    | string | -r us-west-2                              | Region where AWS access portal is hosted. |
+| --start-url or -u | string | -u https://<example>.awsapps.com/start/#/ | The URL for the AWS access portal         |
+| --help or -h      | N/A    | -h                                        | Help menu                                 |
+
+** Example Config (~/.aws/sso.generated)
+
+#+begin_example
+# config generated via https://github.com/djgoku/aws-sso-config-generator
+#
+# This requires AWS CLI v2
+#
+# 1. log into aws sso via `aws sso login --profile use-any-profile-name`
+# 2. validate `AWS_PROFILE=use-any-profile-name aws sts get-caller-identity`
+
+# AWS_CONFIG_FILE=~/.aws/config.generated AWS_PROFILE=1111111-RoleName aws sts get-caller-identity
+[profile 1111111-RoleName]
+sso_start_url = https://<example>.awsapps.com/start/#/
+sso_region = us-east-2
+sso_account_id = 1111111
+sso_role_name = RoleName
+region = us-west-2
+output = json
+#+end_example
+
+** Development
+
+1. Clone repository
+2. ~devbox run do-all~
+
+** FAQ
+
+*** Why am I seeing an old version of an aws-sso-config-generator?
+
+You might need to clean-up old resources from a previous version and re-run the application.
+
+#+begin_example
+./burrito_out/aws_sso_config_generator maintenance uninstall
+[w] This will uninstall the application runtime for this Burrito binary!
+[?] Please confirm this action [y/n]: y
+y
+[i] Deleting directory: /home/devbox/.local/share/.burrito/aws_sso_config_generator_erts-15.2.2_0.1.0
+[i] Uninstall complete!
+[i] Quitting.
+#+end_example
+
+*** How do these binaries work?
+
+We are using [[https://github.com/burrito-elixir/burrito][burrito]] which packages everything required to run the application into a self-extracting executable. Once ran the application is extracted and then ran.
+
+** References
+*** Elixir
+- https://github.com/burrito-elixir/burrito
+- https://github.com/aws-beam/aws-elixir
+
+*** Other
+- https://github.com/jetify-com/devbox
+- https://stackoverflow.com/a/71850591
+- https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/Welcome.html

devbox.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://raw.githubusercontent.com/jetify-com/devbox/0.14.0/.schema/devbox.schema.json",
+  "packages": {
+    "beam.packages.erlang_27.elixir_1_18": "",
+    "erlang":                              "latest",
+    "beam27Packages.elixir-ls":            "latest",
+    "git":                                 "latest",
+    "zig":                                 "latest",
+    "xz":                                  "latest",
+    "_7zz":                                "latest",
+    "github-cli":                          "latest",
+    "curl":                                "latest",
+    "darwin.apple_sdk.frameworks.CoreServices": {
+      "platforms": [
+        "aarch64-darwin",
+        "x86_64-darwin",
+      ],
+    },
+    "act": "latest",
+  },
+  "env": {
+    "ELIXIR_ERL_OPTIONS": "+fnu",
+  },
+  "shell": {
+    "init_hook": [
+      "mkdir -p .nix-mix",
+      "mkdir -p .nix-hex",
+      "export MIX_HOME=$PWD/.nix-mix",
+      "export HEX_HOME=$PWD/.nix-hex",
+      "export ERL_AFLAGS='-kernel shell_history enabled'",
+      "mix local.hex --force",
+      "mix local.rebar --force",
+    ],
+    "scripts": {
+      "do-all": [
+        "mix deps.get --only prod",
+        "mix format --check-formatted",
+        "MIX_ENV=prod mix release --overwrite"
+      ],
+      "version-info": [
+        "MIX_APPLICATION_VERSION=$(elixir -e 'Regex.run(~r/version: \"(\\d+.\\d+.\\d+)\"/, File.read!(\"mix.exs\"), capture: :all_but_first) |> List.first() |> IO.puts()')",
+        "echo \"version $MIX_APPLICATION_VERSION\"",
+        "cd burrito_out",
+        "bash -c 'for file in *_*; do mv \"$file\" \"${file//_/-}\"; done'",
+        "shasum -a 256 ./* > aws-sso-config-generator-checksums.txt",
+        "cd -",
+        "gh release create ${MIX_APPLICATION_VERSION} --generate-notes",
+        "gh release upload ${MIX_APPLICATION_VERSION} ./burrito_out/* -R djgoku/aws-sso-config-generator"
+      ]
+    }
+  }
+}