# broamski/aws-mfa

Manage AWS MFA Security Credentials

Repository: https://github.com/broamski/aws-mfa
Canonical: https://ross.abutalabs.com/products/aws-mfa
Language: Python
License: MIT
License Family: permissive
Topics: aws, mfa, 2fa, two-factor-authentication, multi-factor-authentication, amazon-web-services, aws-sts, sts, awsmfa
Last push: 2024-08-08T16:08:56+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3908, "days_push": 755, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1066, forks 170 (observed 2026-08-28T04:03:27.094122+00:00)

## What it is
aws-mfa is a Python CLI tool that automates obtaining temporary AWS credentials from the Security Token Service (STS) using MFA and writes them to your ~/.aws/credentials file. It replaces bespoke scripts for managing short-term MFA-based AWS credentials.

## Use cases
- fetch temporary AWS credentials with MFA token
- update aws credentials file automatically after MFA login
- manage multiple AWS profiles with MFA enforced
- refresh expiring AWS STS session credentials
- avoid writing custom scripts for AWS MFA authentication

## When to choose
- your AWS account enforces MFA for API/CLI access
- you want automated refresh of short-term STS credentials in ~/.aws/credentials
- you juggle multiple AWS profiles with long-term and short-term credentials

## When to avoid
- you use AWS SSO or IAM Identity Center sessions instead of MFA
- you rely on aws-vault or credential_process-based tooling
- you need a GUI or interactive credential manager

## Facets
- artifact type: cli-tool
- maturity: stable
- function: auth, security, cli, developer-tools
- domain: cloud-computing, security, developer-tools
- platform: cli, python, cross-platform
- tags: aws, mfa, sts, temporary-credentials, aws-credentials, command-line

## Member repositories
- broamski/aws-mfa (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:27.094122+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:55:14.721746+00:00, confidence not recorded.
  - readme: https://github.com/broamski/aws-mfa (fetched 2026-08-28T04:03:27.094122+00:00, sha 3c066d54f206)
  - registry_pypi: https://pypi.org/pypi/aws-mfa/json (fetched 2026-08-29T12:57:22.890825+00:00, sha 7d56684cf205)
- Data as of 2026-08-30T08:39:29.467469+00:00.