AWS Session Manager for macOS
Your AWS roles. Within reach.
Manage MFA sessions and switch IAM roles from your Mac’s menu bar.
In preparation for the App Store
CloudLatch is under development. A download link will be added when the app is available.
Keep the session in view.
A focused workflow for developers working with IAM user credentials, MFA and multiple AWS roles.
-
Switch roles from the menu bar.
Choose a configured role, authenticate with MFA and see when the role session expires. The source MFA session has its own expiry.
-
Renew before expiry.
The app attempts to renew the active role five minutes before expiry while the source MFA session remains valid.
-
Use your AWS profiles.
Temporary credentials are written to the selected role profile and
defaultin your chosen AWS directory.
From MFA to your next task.
Authentication runs through the AWS SDK for Swift. No AWS CLI installation is required.
-
Choose your directory.
Grant access to an AWS configuration folder and select an IAM user access-key profile as the source.
-
Add your roles.
Configure role aliases and your MFA device. Keep the source profile separate from output profiles.
-
Start a session.
Enter an MFA code, assume a configured role and use the resulting temporary credentials in your tools.
Explicit access. Visible boundaries.
You choose the directory the app can access. Source credentials stay in your AWS files; temporary source sessions are stored in macOS Keychain.
Refreshing updates the selected role profile and default. Other profiles are preserved. Tools using default will use the newly written role credentials.
Current scope: macOS 14 or later, IAM user access keys and MFA. IAM Identity Center / SSO and external credential providers are not currently supported.