Support Named Profiles Instead of Default Profile

[BipinXavier]

What Happens

When the AWS SSO session is active, the credentials are always associated with the default profile. This makes it difficult to work with multiple AWS accounts using named profiles.

Expected Behavior

It should be possible to specify a named profile and have the credentials applied to that profile instead of default.

Why this is Important

The primary use case of awsesh is managing multiple AWS accounts, which typically involves named profiles.

Without named profile support, switching between accounts becomes cumbersome, requiring manual credential management.

Suggested Solution

Allow specifying a named profile when running awsesh (e.g., sesh $profilename).

Ensure credentials are stored and used under that profile instead of default.

Steps to Reproduce

Authenticate with sesh $profilename.

Run aws configure list.

Observe that credentials are applied to the default profile instead of $profilename.

Would love to see this enhancement! Let me know if I can help with any testing. 🚀

[Paliago]

I've been thinking about how to implement this. The following options will both add the sessions as profiles other than [default]. I want to do it in two ways.

1. cli pattern:
   Since I've added the possibility to use the cli directly i would like to add a flag to set it as a profile:
   sesh MyOrg MyAccount -p custom-profile

2. tui pattern:
   From the role selection list on a chosen account, press p to get a dialog which asks you what you want to name the profile.
   It should also remember what you called the profile for this account and role combo.

Does these sound like they solve your issue?

[cremich]

+1 on this. I like option 2 tui pattern.

[ilirbekteshi]

My current workaround is using *sh aliases

alias aws-dev="sesh SSONAME ACCOUNTNAME_1 ROLENAME && sesh -w"
alias aws-stage="sesh SSONAME ACCOUNTNAME_2 ROLENAME && sesh -w"
...

Then it is just a matter of "executing" aws-dev and it will set correct credentials if I have a valid session otherwise it will open the browser for authorization. Besides auth it will also print the whoami so that I can see which account I just logged into.

[Paliago]

Very cool! I haven't had time to build this yet but I might throw some agents at it at some point in the near future and see what happens.

[Paliago]

Could you take a look at and test the latest version?
https://github.com/elva-labs/awsesh/releases/tag/v.0.1.5