AWS Vault
AWS CLI login
Set ENV in subshell:
aws-vault exec --no-session bash-my-aws # no-session removes STS / IAM restrictions
aws-vault exec bash-my-aws # defaults to creating temporary session
With metadata server (to refresh tokens):
AWS Console Login
aws-vault login bash-my-aws
Firefox containers
$(aws-vault login -s staging)