Granted
The easiest way to access your cloud.
What is Granted?
Granted is a command line interface (CLI) application which simplifies access to cloud roles and allows multiple cloud accounts to be opened in your web browser simultaneously. The goals of Granted are:
- Provide a fast experience around finding and assuming roles
- Leverage native browser functionality to allow multiple accounts to be accessed at once
- Encrypt cached credentials to avoid plaintext SSO tokens being saved on disk
What does Granted work with?
Granted supports MacOS, Linux, and Windows. Our Windows support is less extensively tested than other platforms so if you run into any problems please let us know.
Currently Granted supports accessing roles in AWS. If you’d like to see support for another cloud provider please open an issue!
Documentation
Get started by reading our documentation.
Contributing
See CONTRIBUTING.md for information on how to contribute. We welcome all contributors - join our Slack to discuss the project!
See MAINTAINERS.md for the list of project maintainers.
Security
See SECURITY.md for security information, including how to report a vulnerability. You can view our full security documentation on the Granted website.
Summary
Cloud-role access CLI from fwdcloudsec (1.8k stars, MIT, Go; granted.dev): fast role finding/assuming, multiple AWS accounts open simultaneously via native browser profiles (granted-containers isolation), SSO token cache encrypted instead of plaintext on disk.
Learnings
- Solves the daily multi-account AWS pain:
dasel/fuzzy assume + browser-profile-per-account beats aws-vault’s login churn. Design kin to ocli’s client/TUI patterns (config-driven profiles, scripted assume for CI). Encrypted SSO cache is the security differentiator vs plaintext ~/.aws/sso/cache.
Gotchas
- (none yet)
Hands-on
(research only)