Show HW: ofa – CLI tool using your IdP to generate temporary AWS credentials (github.com)

This is a side project born out of the urge to replace a tool which engineering at a previous job was required to use.

It eradicates long lived AWS credentials (which inevitably leaked out by getting checked into SCM) and allows users to create on-demand ephemeral access keys using an IdP (currently Okta and OneLogin supported).