AWS SSO, one click from your menu bar.
EasySSO lives in your menu bar and turns AWS SSO logins into a single click. No terminal, no copy-pasting tokens — just pick a profile and your credentials are ready to go.
- prod-admin in 7h 42m824103948210 · AdministratorAccess
- prod-readonly in 2 days824103948210 · ReadOnlyAccess
- staging-deployer signing in…518209374625 · DeployRole
- sandbox-dev expired102938475610 · PowerUserAccess
- analytics-readonly not logged in993048217340 · AnalyticsRO
Features
Everything you need to switch AWS roles fast.
EasySSO reads your existing ~/.aws/config, handles the OAuth device flow, and writes credentials to ~/.aws/credentials — exactly where the AWS CLI and SDKs expect them.
All your profiles, one place
EasySSO reads ~/.aws/config and lists every SSO profile with its account, role, and live status — searchable in a single keystroke.
One-click device-code login
Click a profile and EasySSO opens AWS’s access portal in your browser, polls for approval, and writes credentials when you’re done.
Status at a glance
Color-coded indicators show valid, expiring, expired, and not-logged-in profiles with relative expiry — no more cryptic CLI errors at the worst moment.
Add & edit profiles in-app
A focused form with inline validation handles SSO start URLs, regions, account IDs, and roles — no manual config-file editing.
Credentials, masked by default
Expand a profile to see access key, secret, session token, and exact expiry. Copy with one click, masked while you browse.
Native, quiet, and fast
Pure SwiftUI menu-bar app. Launch at login, tiny memory footprint, no background polling — it only does work when you click.
How it works
From menu bar to ready-to-deploy in seconds.
- 1
Click a profile
Open the menu bar, search if you have many profiles, and click the one you need. EasySSO starts the SSO device-code flow.
- 2
Approve in the browser
Your AWS access portal opens automatically with a verification code already filled in. Confirm the login — that’s the only step that leaves the app.
- 3
Use any AWS tool
EasySSO writes credentials to ~/.aws/credentials with the right profile name. Run terraform, the AWS CLI, an SDK — they just work.
Pricing
One price. Forever. No subscription.
EasySSO is a one-time purchase on the Mac App Store. Updates are included.
EasySSO
One-time- Unlimited AWS SSO profiles
- One-click device-code login
- Native menu bar app, launch at login
- All future updates included
- Works fully offline between logins
macOS 14+ · Apple Silicon and Intel · VAT included where applicable
FAQ
Questions, answered.
What macOS version do I need?
EasySSO requires macOS 14 or later and runs natively on both Apple Silicon and Intel Macs.
Do I need the AWS CLI installed?
No. EasySSO talks to AWS SSO directly using the official AWS SDK for Swift. It shares the same credentials and token cache layout as the AWS CLI, so if you do install the CLI later, everything just works side-by-side.
Where does EasySSO store credentials?
In ~/.aws/credentials, exactly where the AWS CLI and every AWS SDK looks for them. Your existing tools — terraform, awscli, boto3, the AWS SDKs — pick them up automatically.
Does EasySSO send my data anywhere?
No. EasySSO talks only to AWS endpoints to perform the SSO login. There’s no analytics, no telemetry, no account, and nothing leaves your Mac except the AWS API calls you trigger by clicking a profile.
Can I add and edit profiles inside the app?
Yes. The Add Profile window has fields for SSO start URL, SSO region, account ID, role name, and a default region for the AWS CLI, with inline validation so you can’t save a broken profile.
What if I already have an existing ~/.aws/config?
EasySSO uses it as-is. Profiles you’ve already configured show up immediately. Anything you add in the app is written back to the same file in standard AWS config format, so other tools see it too.
Is there a free trial?
The Mac App Store doesn’t support trials, so EasySSO is sold as a one-time purchase. If something doesn’t work for you, Apple’s standard refund process applies.
How do I get support?
Email mariusbackes@icloud.com — replies usually come within a couple of working days.
Still have a question? Email mariusbackes@icloud.com.