[ryan-duve]

My work ritual every morning:

1. Power on laptop (it is powered off every day at 5 PM).

2. Log into VPN.

3. Log into Okta.

4. Log into AWS accounts, one per container (about 7 or 8).

5. Log into Docker Desktop.

6. Log into AWS CLI to get daily credentials.

The whole thing takes about 3-4 minutes. A former colleague referred to this as my "mise en place", or my daily arranging of my working environment. Like the article suggests, I find this offers me a "centering" before I open my email, calendar and missed chat messages and get started for the day.

[rkagerer]

I'm glad it helps you center.

But does anyone else think it's crazy how many logons you need to do on a repetitive basis?

[caminante]

I know you mean crazy bad, but only needing 3-4 minutes is crazy good.

Go ask your baker how early they had to arrive to make sure your croissan'wich was ready at 8:23 AM.

[theshrike79]

All of this should be just a matter of plugging in a $device into your computer that proves you are you. Then every other service should trust that and just log you in automatically.

[3eb7988a1663]

Do those stay logged in for extended amounts of time? Most of my "serious" accounts have expiration times of an hour, so I only ever login when required.

[ryan-duve]

They're all set for the day. I probably wouldn't do it if I had to log in every hour.

[tokenless]

All that should just happen. Unless it is FedRAMP or something insane like that.

[nebezb]

I have set my own cli credentials ttl to 8 hours and require 2FA to refresh. Once daily works fine for me. It all takes ~30 seconds, really.

[Topgamer7]

Hello internet friend. I may be able to make your life easier for 4.

You can use aws vault to open the aws console using roles:

    aws-vault --help
    usage: aws-vault [<flags>] <command> [<args> ...]
    ...
    login [<flags>] [<profile>]
        Generate a login link for the AWS Console.

Which when combined with this plugin: https://github.com/blimmer/zsh-aws-vault

You can just to `avli some-role` and it will pop up in the browser in a new profile.

The only downside here is that you can't combine them into one window.

But it takes the pain out of logging in, and 2 factor, etc.

[aavci]

What is your VPN setup like?