Skills aws-sso-login

📦

aws-sso-login

Name: aws-sso-login
Author: Daisuke897

Content revision r1 Safe ⚙️ External commands📁 Filesystem access

Authenticate AWS CLI with SSO

AWS CLI work often stops when an SSO session expires. This skill guides a safe SSO login flow for a selected profile and confirms the session is ready.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "aws-sso-login" from https://skillstore.io/skills/daisuke897-aws-sso-login.md and its manifest at https://skillstore.io/api/skills/daisuke897-aws-sso-login/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/daisuke897-aws-sso-login.md Signed manifest GET /api/skills/daisuke897-aws-sso-login/manifest Signed lockfile GET /api/skills/daisuke897-aws-sso-login/lockfile

Test it

Using "aws-sso-login". Authenticate with the project AWS SSO profile.

Expected outcome:

The assistant asks for the profile if it is not documented, starts AWS SSO login, and waits for browser authentication to finish.

Using "aws-sso-login". My AWS CLI session expired before deployment.

Expected outcome:

The assistant renews the SSO session for the selected profile and confirms that AWS CLI commands can continue.

Using "aws-sso-login". I am working in a headless terminal.

Expected outcome:

The assistant uses the no-browser SSO flow and tells the user to open the provided authentication URL manually.

Security Audit

Safe

v10 • 7/9/2026 Open versioned report

The static findings are Markdown formatting, documented AWS CLI examples, and standard AWS SSO configuration references. No prompt injection, credential exfiltration, hidden file access, or malicious intent was found in SKILL.md.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (9)

SKILL.md:16 SKILL.md:21 SKILL.md:28-31 SKILL.md:31-35 SKILL.md:35 SKILL.md:49-55 SKILL.md:55-60 SKILL.md:60-69 SKILL.md:69-70

📁 Filesystem access (2)

SKILL.md:60 SKILL.md:60

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/daisuke897-aws-sso-login/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/daisuke897-aws-sso-login/security.svg)](https://skillstore.io/skills/daisuke897-aws-sso-login?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/daisuke897-aws-sso-login?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/daisuke897-aws-sso-login/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/daisuke897-aws-sso-login.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Daisuke897. (2026). aws-sso-login security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/daisuke897-aws-sso-login/audits/10

BibTeX citation

@techreport{daisuke897-daisuke897-aws-sso-login-2026,
  author = {Daisuke897},
  title = {aws-sso-login security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/daisuke897-aws-sso-login/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "aws-sso-login security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "Daisuke897"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/daisuke897-aws-sso-login/audits/10"
identifiers:
  - type: other
    value: "skillstore:daisuke897-aws-sso-login:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Renew an expired AWS CLI session

Re-authenticate before running deployment, infrastructure, or diagnostic commands that depend on AWS CLI access.

Prepare a project-specific AWS profile

Use the documented project profile so cloud commands run against the intended account and permission set.

Authenticate before assuming roles

Complete SSO login before using later role-assumption workflows that require an active source profile.

Try These Prompts

Use the aws-sso-login skill to authenticate with the default AWS SSO profile for this project.

Ask before choosing a profile

Use the aws-sso-login skill, but ask me which AWS CLI profile to use if the project does not define one.

Verify the session after login

Authenticate with AWS SSO for the project profile, then verify that the AWS CLI identity is available.

Prepare for role assumption

Run AWS SSO login for the required source profile so the next role-assumption step can use an active session.

Best Practices

Confirm the profile name before authentication when the project does not define a default.
Use least-privilege AWS SSO permission sets for the selected profile.
Verify the authenticated identity before running account-changing operations.

Avoid

Do not guess an AWS profile when multiple accounts are available.
Do not treat SSO login as permission to run destructive cloud commands.
Do not copy SSO cache files or AWS configuration into shared logs.

Frequently Asked Questions

Does this skill configure AWS SSO for me?

No. AWS CLI v2 and the SSO profile must already be configured before using the skill.

Will it open a browser?

Yes, the normal AWS SSO flow opens a browser. In headless environments, it can use a manual URL flow.

Can it choose the correct AWS profile automatically?

Only when project documentation or prior context defines the profile. Otherwise it should ask the user.

Does it store AWS credentials?

No. AWS CLI manages the local SSO session cache using its normal configuration and credential mechanisms.

How long does the session last?

The duration depends on AWS SSO configuration. Many sessions last about 8 to 12 hours.

Can I use it before assuming an AWS role?

Yes. It is useful before role-assumption commands that depend on an active SSO-authenticated source profile.

Developer Details

Author

Daisuke897

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Daisuke897/dotfiles/tree/main/.github/skills/aws-sso-login

Ref

7db9b9f06e0ab79c575b58bc48c4d8dc9849f424

Maintenance freshness

7/22/2026

Usage

5 downloads · 183 views

File structure

📄 SKILL.md