Assume any role, any cloud.
rolle is a desktop app and a CLI. It hands short-lived AWS, Azure, and Google Cloud credentials to your tools and writes no secret to disk.
- AWS. Sign in to IAM Identity Center once and get every account and role you can reach. Chain
AssumeRolefrom any session. Add IAM users, with MFA when you want it. Each active session is a profile backed bycredential_process, so the AWS CLI and every SDK use it with--profile. - Azure. Sign in to an Entra ID tenant. Each subscription is a session that yields Resource Manager tokens.
- Google Cloud. Reuse the credentials
gcloudhas. Each project is a session. Impersonate service accounts. - Desktop app. Live expiry countdowns, favorites, tags, one-click console and terminal, a tray with quick actions, and signed self-updates.
- Secrets live in the OS keychain. Short-lived credentials sit in owner-only files and expire on their own.
- No telemetry. rolle talks to the clouds you sign in to and to GitHub releases for the update check, which you can turn off. Nothing else.
rolle imports what your machine has: Identity Center portals from the AWS CLI and Granted, tenants from the az CLI, gcloud credentials, and a Leapp workspace.
brew install --cask nateships/tap/rolleThe cask installs the app and the rolle command. Windows and Linux builds and CLI archives are on the releases page. Docs: getrolle.com.
rolle integration add aws-sso --alias acme --start-url https://acme.awsapps.com/start --region us-east-1
rolle integration login acme
rolle start "Acme Prod/AdministratorAccess"
aws sts get-caller-identity --profile default--json and stable exit codes make it scriptable. See the CLI reference and Agents and scripts.
Open an issue. In the app, Settings → About → Report a problem fills in your version and platform, and Support bundle writes a redacted zip to attach.
CONTRIBUTING.md: setup, tasks, the commit convention, releases, and the repository layout.
GPL-3.0-or-later. The Go gopher artwork is by Renee French, adapted for rolle under CC BY 4.0.