skills.rest
gooftroop
gooftroopCOMMUNITY
Explore all skills by this author →
GitHub

aws-sts-auth

Authenticate to AWS with temporary STS credentials and MFA enforcement.

Updated Mar 6, 2026
Search Tags:#security#authentication#aws#credentials#mfa#sts
One-click install
npx skills add https://github.com/gooftroop/Armoury --skill aws-sts-auth
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aws-sts-auth
Source: https://github.com/gooftroop/Armoury/tree/main/.opencode/skills/aws-sts-auth
Command: npx skills add https://github.com/gooftroop/Armoury --skill aws-sts-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Ensures that you have valid, temporary AWS credentials with Multi-Factor Authentication (MFA) before executing any AWS-related tasks, preventing access denied errors and security oversights.

Core Features & Use Cases

  • Credential Check: Verifies the validity and expiration of current AWS session tokens.
  • MFA Authentication: Prompts for and securely uses MFA codes to refresh temporary credentials.
  • Automated Setup: Initializes long-term credentials from existing default credentials on first use.
  • Use Case: Before deploying a new service using AWS CDK, this skill ensures your AWS session is active and authenticated with MFA, guaranteeing a smooth deployment process.

Quick Start

Run the aws-sts-auth skill to check your AWS credentials status.

Frequently Asked Questions about aws-sts-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate to AWS with temporary STS credentials and MFA?▼

AWS STS authentication with MFA verifies your current session token validity and expiration, prompting for a multi-factor authentication code to securely refresh temporary security credentials for API access.

What is the best way to prevent AWS access denied errors during CDK deployments?▼

Preventing AWS access denied errors during CDK deployments requires validating temporary STS credentials with MFA enforcement before execution, ensuring your session is active and properly authenticated for smooth deployment processes.

Do I need a specific script location to manage AWS STS credential validation?▼

AWS STS credential management requires a script located at the $HOME/.local/bin/sts-auth path to handle credential validation, MFA authentication, and automated setup from existing default credentials on first use.

Can I use temporary AWS credentials with MFA for Terraform and Lambda operations?▼

Temporary AWS credentials with MFA support Terraform tasks, Lambda invocations, S3 operations, CloudFormation, and CDK deployments, managing API access across these services through the security token service authentication mechanism.

Why does my AWS session expire and how do I refresh temporary security tokens?▼

AWS sessions expire due to temporary security token time limits; refreshing them requires submitting a new MFA code through the STS authentication process to generate a fresh set of temporary credentials for continued API access.

Related Skills

Explore More Software Engineering Skills→
veelengaveelenga

aws-sso-refresh

Refreshes expired AWS SSO tokens for credential recovery in macro tools.

Community
Advanced
bughqbughq
2

stacks-cloud

Automate AWS infrastructure provisioning with CloudFormation and CDK.

Official
Advanced
MICHAEL-BODOMICHAEL-BODO
2

senior-devops

Generate CI/CD pipelines and Terraform infrastructure for AWS, GCP, and Azure.

Community
Advanced
benjaminshafiibenjaminshafii
10

bitwarden

Configure Bitwarden CLI with API key authentication to retrieve vault credentials.

Community
Intermediate