aws-sts-auth

Authenticate to AWS with temporary STS credentials and MFA enforcement.

Updated Mar 6, 2026

Search Tags:#security #authentication #aws #credentials #mfa #sts

Ready to run

npx skills add https://github.com/gooftroop/Armoury --skill aws-sts-auth

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: aws-sts-auth
Source: https://github.com/gooftroop/Armoury/tree/main/.opencode/skills/aws-sts-auth
Command: npx skills add https://github.com/gooftroop/Armoury --skill aws-sts-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Ensures that you have valid, temporary AWS credentials with Multi-Factor Authentication (MFA) before executing any AWS-related tasks, preventing access denied errors and security oversights.

Core Features & Use Cases

Credential Check: Verifies the validity and expiration of current AWS session tokens.
MFA Authentication: Prompts for and securely uses MFA codes to refresh temporary credentials.
Automated Setup: Initializes long-term credentials from existing default credentials on first use.
Use Case: Before deploying a new service using AWS CDK, this skill ensures your AWS session is active and authenticated with MFA, guaranteeing a smooth deployment process.

Quick Start

Run the aws-sts-auth skill to check your AWS credentials status.

Frequently Asked Questions about aws-sts-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I authenticate to AWS with temporary STS credentials and MFA?▼

AWS STS authentication with MFA verifies your current session token validity and expiration, prompting for a multi-factor authentication code to securely refresh temporary security credentials for API access.

What is the best way to prevent AWS access denied errors during CDK deployments?▼

Preventing AWS access denied errors during CDK deployments requires validating temporary STS credentials with MFA enforcement before execution, ensuring your session is active and properly authenticated for smooth deployment processes.

Do I need a specific script location to manage AWS STS credential validation?▼

AWS STS credential management requires a script located at the $HOME/.local/bin/sts-auth path to handle credential validation, MFA authentication, and automated setup from existing default credentials on first use.

Can I use temporary AWS credentials with MFA for Terraform and Lambda operations?▼

Temporary AWS credentials with MFA support Terraform tasks, Lambda invocations, S3 operations, CloudFormation, and CDK deployments, managing API access across these services through the security token service authentication mechanism.

Why does my AWS session expire and how do I refresh temporary security tokens?▼

AWS sessions expire due to temporary security token time limits; refreshing them requires submitting a new MFA code through the STS authentication process to generate a fresh set of temporary credentials for continued API access.