Dynomatic
Log in

Credential management

Any AWS account, connected in seconds.

Six credential types, chosen from one picker that asks how you connect. Your ~/.aws profiles are read in place, Test Connection runs before you save, and managed secrets live in your OS keyring, never in a plaintext file.

Try Free for 14 Days

Highlights

01Six credential types

IAM keys, MFA, IAM Identity Center SSO, AWS Login with passkeys, credential process, and local endpoints.

02One question to start

New Profile asks How do you connect to AWS? and offers six cards: Access keys, IAM Identity Center, AWS Login, MFA, Local DynamoDB, and Credential Process. Pick one and its form opens with the chosen type pinned in the header.

03Your ~/.aws profiles, in place

Profiles from ~/.aws/config appear in the manager under their own heading, read-only, edited with the AWS CLI. Dynomatic never rewrites the file.

04Keyring, not plaintext

Managed secrets live in Apple Keychain, Windows Credential Manager, or Linux Secret Service. The edit form never receives them back. Leave a secret blank to keep it.

05Test before saving

Test Connection runs the real sign-in from the form before the profile exists. It writes one temporary keyring entry for the run and removes it after.

06Workspaces follow profiles

A workspace is one profile at one region. Open as many as you like. Each owns its saved queries, scripts, table settings, favorites, and history.

Everything inside

Every auth flow coveredIAM keys, MFA with an OTP code on top of a Source Profile, IAM Identity Center SSO with a shared session, AWS Login with passkeys through the AWS CLI, credential process for any external helper, and local endpoints for Dynoxide, DynamoDB Local, or LocalStack. Assume-role chains work on top of any of them.
Profile managerManage Profiles is a master-detail dialog. Search and New Profile sit on the left over the Managed and From ~/.aws/config sections. The selected profile fills the right with Basic Info, Credentials, and Advanced, plus Edit and Delete on managed profiles.
Advanced OptionsRetry Mode, Max Attempts, CA Bundle, FIPS and dualstack endpoints, and a Role Assumption Chain builder with Session Name, External ID, Duration, and MFA Serial per step.
Per-profile regionEach profile carries a Default Region. The status bar profile pill lists every profile with the regions it is open in, and ends with Manage Profiles.
Environment badges on profilesprod, staging, and dev badges on classified profiles in the switcher and the manager, so the risky account is never a surprise.
Same account, one workspaceTwo workspaces that reach the same AWS account and region are offered a merge, never merged on their own. A profile that disappears from ~/.aws/config marks its workspace Profile missing rather than losing anything.

Goes well with

Environment safetyProd, staging, and dev, classified and color-coded.Explore →Template variablesDefine values once, reference them anywhere as chips.Explore →Table browserEvery table, one keystroke away.Explore →

Every account, one keyring away.

Try Free for 14 Days