Password less AWS Console LogIn using DUO & AWS STS.

This post will help someone to Login to AWS console, with the help of DUO without any password.
⚠️ Important ⚠️ — This is a POC solution only, use it at your own discretion.

⚠️ Important Warnings ⚠️:-

• This is a POC solution only, use it at your own discretion.
• This can be risky for some, only good for personal accounts.
• The auth is single factor, based on what you have. The what you know(username) is hard coded within the app code as of now.
• Better to add username password prompt on top this flow.

Tech stack used is:-

• Java, Spring Boot.
• Duo(setting up DUO account is out of scope).
• AWS SDK v2. Needed for AWS STS’s Assume Role

Knowledge requirements:-

• AWS, AWS STS, AWS IAM.
• Duo experience
• Spring Boot, etc.

Flow:-

Setup instructions are there in the README.MD for the code repo shared below.

Code repository is located here — https://github.com/krnbr/aws-duo-mfa

You can reach me over LinkedIn for any questions and queries:-

https://www.linkedin.com/in/krnbr/

Karanbir Singh — Senior Software Engineer — Telstra | LinkedIn