---
id: yawsso
version: "1.4.0"
license: MIT
license_treatment: permissive
maintenance: active
---

# yawsso — Yet Another AWS SSO - sync up AWS CLI v2 SSO login session to legacy CLI v1 credentials

License: permissive · Maintenance: active · Downloads: 73.9K/mo

## What it is and what it does

yawsso bridges the gap between AWS CLI v2's SSO authentication and tools that only understand AWS CLI v1 credential files. When you log in via AWS SSO with CLI v2, your session is cached locally but not automatically written to the legacy credentials file that older tools expect. This package reads your active SSO session and writes temporary credentials into the standard AWS credentials file, making them available to any tool that reads that file.

The tool runs as a command-line utility with no runtime dependencies, offering flexible profile selection (single, multiple, pattern-matched, or all profiles), credential renaming on sync, token export with ROT13 encoding, and integrated login-then-sync workflows. It's designed for teams already using AWS SSO who need to work with tools like Terraform, CDK, or custom scripts that predate or don't support SSO natively.

Use it for:

- Sync SSO credentials to legacy format so Terraform, CDK, or other tools can authenticate without SSO support.
- Export temporary credentials as environment variables for use on ephemeral instances or CI/CD runners.
- Rename SSO profiles during sync to match tool-specific naming conventions or avoid conflicts.
- Automate credential refresh in shell scripts by running yawsso before invoking AWS-dependent tools.
- Copy time-gated access tokens to clipboard for manual use on external systems or shared machines.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Syncs AWS CLI v2 SSO login sessions into legacy AWS CLI v1 credentials format, allowing tools that don't support SSO to use temporary credentials from your SSO setup.

Yes. If you use AWS SSO with CLI v2 but also rely on tools that only read legacy credentials, this solves a real friction point with no dependencies and active maintenance. The MIT license and zero security vulnerabilities make it safe to adopt. Install it if you're bridging SSO and older AWS tooling.

## Install

pip install yawsso
uv add yawsso
poetry add yawsso

## Installing yawsso

Before you install: Low friction installation with no runtime dependencies. Active maintenance with recent commits and a stable release history since 2020.

License in practice: MIT license is permissive; you can use this freely in commercial and private projects with minimal restrictions.

Quickstart:

pip install yawsso

# After AWS SSO login
aws sso login --profile dev

# Sync credentials to legacy format
yawsso -p dev

Requires Python >= 3.7 and AWS CLI v2 already installed and configured with SSO.

Verify before relying:

- Whether pyperclip integration (optional dependency for clipboard support) is included in the base install or requires explicit installation.
- Exact behavior and security implications of ROT13 token export when used on shared systems.

## Package facts

- License: MIT (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 73.9K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws sso credentials sync, aws cli v2 to v1 credentials, aws sso legacy cli support, aws temporary credentials export, aws profile credential bridge, aws-credentials, sso-bridge, cli-tool

[View on SkillFed](https://skillfed.io/packages/yawsso) · [View on PyPI](https://pypi.org/project/yawsso/)