#!/bin/sh

[ -n "$ROLE_ARN" ] && STS_ARGS=" --role-arn $ROLE_ARN "
[ -n "$AWS_PROFILE" ] && STS_ARGS="$STS_ARGS --profile $AWS_PROFILE "

CREDS=$(aws sts assume-role $STS_ARGS --role-session-name "`whoami`@`hostname`-sls-invocation-`date +%F-%H-%M-%S`" --out json)

echo $@

AWS_ACCESS_KEY_ID=$(echo $CREDS | jq -r '.Credentials.AccessKeyId') \
AWS_SECRET_ACCESS_KEY=$(echo $CREDS | jq -r '.Credentials.SecretAccessKey') \
AWS_SESSION_TOKEN=$(echo $CREDS | jq -r '.Credentials.SessionToken') \
$@