#!/usr/bin/env bash

set -e

awsume prod

eval $(aws sts assume-role --role-arn arn:aws:iam::662302927201:role/qa-orchard-access --role-session-name ${USER}-$(uuidgen) | jq -r '.Credentials | "export AWS_ACCESS_KEY_ID=\(.AccessKeyId)\nexport AWS_SECRET_ACCESS_KEY=\(.SecretAccessKey)\nexport AWS_SESSION_TOKEN=\(.SessionToken)\n"')

aws secretsmanager get-secret-value --secret-id qa-system-jwt-secret