flow

Flow AWS tooling

Flow is a CLI tooling that helps developing applications on AWS. Is meant to be used only in dev environments and not in production.

NOTE: Flow CLI is under development, and may occasionally make backwards-incompatible changes.

Installation

• homebrew

  brew install flow-lab/tap/flow
  

• snap

  sudo snap install flow --classic
  

• latest version from github releases

  curl https://raw.githubusercontent.com/flow-lab/flow/master/bin/get-latest.sh --output get-latest.sh
  chmod +x get-latest.sh
  ./get-latest.sh
  

• local with go get

  go get -u github.com/flow-lab/flow
  cd $GOPATH/src/github.com/flow-lab/flow
  go install
  

example usage:

• delete all items from DynamoDB

  flow dynamodb delete --table-name TestTable

• delete items with amount > 100

  flow dynamodb delete --table-name Test --filter-expression "amount > :amount" --expression-attribute-values '{":amount":{"N":"100"}}'

• encode base64

  flow base64 encode --input "hello"

• decode base64

  flow base64 decode --input "aGVsbG8="

help:

flow --help
NAME:
   development tooling for AWS - A new cli application

USAGE:
   flow [global options] command [command options] [arguments...]

VERSION:
   0.1.0

COMMANDS:
     dynamodb        
     sqs             
     sns             
     cloudwatch      
     cloudwatchlogs  
     ssm             
     help, h         Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --help, -h     show help
   --version, -v  print the version

or

flow dynamodb --help
NAME:
   development tooling for AWS dynamodb -

USAGE:
   development tooling for AWS dynamodb command [command options] [arguments...]

COMMANDS:
     purge     fast purge dynamodb using scan operation
     capacity  update read and write capacity

OPTIONS:
   --help, -h  show help

authentication

Flow will be configured and will authenticate using the same methods defined by aws-cli.

Currently it supports authentication with:

• A EnvProvider which retrieves credentials from the environment variables of the running process. Environment credentials never expire. Environment variables used:

  • Access Key ID: AWS_ACCESS_KEY_ID or AWS_ACCESS_KEY

  • Secret Access Key: AWS_SECRET_ACCESS_KEY or AWS_SECRET_KEY

• A SharedCredentialsProvider which retrieves credentials from the current user's home directory, and keeps track if those credentials are expired.

  Profile ini file example: $HOME/.aws/credentials

• A AssumeRoleTokenProvider with enabled SharedConfigState which uses MFA prompting for token code on stdin. Go to session doc for more details.