theist / tacoma

Simple wrapper for AWS credential key management

Tacoma

Simple command-line tool for managing AWS credentials across different projects and tools.

Installation

$ gem install tacoma

Usage

Tacoma needs a special file .tacoma.yml in your home directory. It can create a sample for you with

 tacoma install 

The format of the .tacoma.yml file is pretty straighforward

 project:
   aws_identity_file: "/path/to/pem/file/my_project.pem"
   aws_secret_access_key: "YOURSECRETACCESSKEY"
   aws_access_key_id: "YOURACCESSKEYID"
   repo: "$HOME/projects/my_project"
 another_project:
   aws_identity_file: "/path/to/another_pem.pem"
   aws_secret_access_key: "ANOTHERECRETACCESSKEY"
   aws_access_key_id: "ANOTHERACCESSKEYID"
   repo: "$HOME/projects/another_project"

Once setup with a file like this, you can run

 tacoma list

And it will list all the configured entries. Running

 tacoma switch project

Will display the export commands for the AWS_SECRET_ACCESS_KEY, AWS_ACCESS_KEY_ID credential environment variables, will add the specified identity file into the SSH agent, and will generate configuration files for the supported tools, which at this time are

• Fog, which should work with Capistrano's capify-ec2.
• Boto
• s3cmd

Bash Completion

There's an user contributed script for bash completion feature. To use it simply get from the /contrib/ path and source it in your bash session (after rbenv gets sourced if it is there)

TODO

• Check for errors in the tacoma.yml file
• Add other AWS tool providers (Knife, AWS cli, ...)
• Honor the different optional environment vars for the different config files (i.e FOG_RC)

THANKS

This tool is shamelessly inspired in Raul Murciano's rack-generator