aws-sso-util

What it is and what it does

aws-sso-util is a command-line tool and Python library that smooths over operational friction when using AWS IAM Identity Center (formerly AWS SSO). It wraps aws-sso-lib to provide utilities for configuring your .aws/config file, logging in and out, integrating with the AWS SDK, looking up account and role identifiers, and working with CloudFormation. The package is designed as a temporary bridge until AWS improves Identity Center's user experience.

The tool is typically installed via pipx to keep it isolated, then used as a CLI for common Identity Center tasks. Developers can also import aws-sso-lib directly in Python code to create boto3 sessions for specific accounts and roles programmatically. The package depends on standard AWS tooling (boto3), configuration parsing (pyyaml, jsonschema), and HTTP utilities (requests), making it a lightweight addition to an AWS-focused workflow.

Use it for:

• Automate .aws/config setup for teams using Identity Center instead of manual IAM user credentials.
• Create temporary boto3 sessions for a specific AWS account and role without manual credential copying.
• Build CLI workflows that log in to Identity Center and manage session state across multiple accounts.
• Integrate Identity Center authentication into Python applications that need programmatic AWS access.
• Look up AWS account IDs and role names from Identity Center without navigating the AWS console.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

aws-sso-util provides command-line utilities and a Python library to work around rough edges in AWS IAM Identity Center, handling configuration, login/logout, SDK integration, identifier lookup, and CloudFormation tasks.

Yes, if you use AWS IAM Identity Center and want to reduce friction in credential management and configuration. The package is stable (Apache-2.0, no known vulnerabilities), has low install friction, and solves a real operational problem. The 803-day release gap is a minor concern given recent repository activity, but check whether your Identity Center setup matches the utilities' scope before committing.

Install

aws-sso-util on PyPI

pip install aws-sso-util

uv add aws-sso-util

poetry add aws-sso-util

Installing aws-sso-util

Before you install

Low install friction: pure Python wheel with eight runtime dependencies (click, boto3, pyyaml, jsonschema, aws-error-utils, python-dateutil, aws-sso-lib, requests). Maintenance status is aging—last release was 803 days ago (2024-06-02), though the repository remains active with a recent commit (2025-08-26) and 1053 stars.

License in practice

Apache-2.0 permissive license: you can use, modify, and distribute this package freely in commercial and private projects, with minimal restrictions beyond attribution and liability disclaimers.

Quickstart

# Install via pipx (recommended for CLI tools)
pipx install aws-sso-util

# Or via pip
pip install aws-sso-util

# Use the CLI
aws-sso-util --help

# Or import the underlying library
from aws_sso_lib import get_login_session
session = get_login_session(start_url='...', sso_region='...')

Requires AWS credentials or Identity Center configuration to function; the underlying aws-sso-lib handles authentication interactively.

Verify before relying

• Whether the 803-day gap since last release indicates active maintenance or dormancy despite recent commits.
• Specific Identity Center features or edge cases the utilities address beyond the five categories listed.

Package facts

Evidence: aws_sso_util-4.33.0-py3-none-any.whl

Tags

More Utilities packages