Install-Package awspowershell -Source PSGallery
$Endpoint = "https://adfs.blahnet.com/adfs/ls/IdpInitiatedSignOn.aspx?loginToRp=urn:amazon:webservices"
Set-AWSSamlEndpoint -Endpoint $Endpoint -StoreAs "adfs" -AuthenticationType NTLM
# Get all roles
Set-AWSSamlRoleProfile -StoreAllRoles -EndpointName adfs
$Instances = Get-EC2Instance -ProfileName 123456789012:role/Ops-blahnet -Region us-east-1
# prompt for role and save it as the default so you do not need to specify the profile for each command
Set-AWSSamlRoleProfile -StoreAs default -EndpointName adfs
$Instances = Get-EC2Instance -Region us-east-1 -Filter @( @{name='tag:ProductCode'; values="Product1"} )
$Instances | select @{Name='InstanceId'; Expression={($_.Instances.InstanceId)}},
@{Name='InstanceType'; Expression={($_.Instances.InstanceType)}},
@{Name='Name'; Expression={($_.Instances.Tag | Where {$_.key -eq "Name"} | %{$_.Value}) }},
@{Name='PrivateIP'; Expression={($_.Instances.PrivateIPAddress)}},
@{Name='State'; Expression={($_.Instances.state.name.Value)}} |
ft -autosize
# Specify a specific role and save it as a profile called Blah-Ops
$params = @{
"PrincipalARN"="arn:aws:iam::123456789012:saml-provider/adfs.blahnet.com"
"RoleARN"="arn:aws:iam::123456789012:role/Ops-blahnet"
}
Set-AWSSamlRoleProfile @params -StoreAs Blah-Ops -EndpointName adfs -NetworkCredential $Credential
$Instances = Get-EC2Instance -Region us-east-1 -Filter @( @{name='tag:ProductCode'; values="Product1"} ) -ProfileName Blah-Opse
$Instances.count