Credential management

Any AWS account, connected in seconds.

Six credential types, chosen from one picker that asks how you connect. Your ~/.aws profiles are read in place, Test Connection runs before you save, and managed secrets live in your OS keyring, never in a plaintext file.

Download Free

Highlights

01Six credential types

IAM keys, MFA, IAM Identity Center SSO, AWS Login with passkeys, credential process, and local endpoints.

02One question to start

New Profile asks How do you connect to AWS? and offers six cards: Access keys, IAM Identity Center, AWS Login, MFA, Local DynamoDB, and Credential Process. Pick one and its form opens with the chosen type pinned in the header.

03Your ~/.aws profiles, in place

Profiles from ~/.aws/config appear in the manager under their own heading, read-only, edited with the AWS CLI. Dynomatic never rewrites the file.

04Keyring, not plaintext

Managed secrets live in Apple Keychain, Windows Credential Manager, or Linux Secret Service. The edit form never receives them back. Leave a secret blank to keep it.

05Test before saving

Test Connection runs the real sign-in from the form before the profile exists. It writes one temporary keyring entry for the run and removes it after.

06Workspaces follow profiles

A workspace is one profile at one region, with an icon and color you choose. Open as many as you like. Each owns its saved queries, scripts, table settings, favorites, and history, and keeps them when you disconnect it.

Everything inside

Every auth flow coveredIAM keys, MFA with an OTP code on top of a Source Profile, IAM Identity Center SSO with a shared session, AWS Login with passkeys through the AWS CLI, credential process for any external helper, and local endpoints for Dynoxide, DynamoDB Local, or LocalStack. Assume-role chains work on top of any of them.
Profile managerManage Profiles is a master-detail dialog. Search and New Profile sit on the left over the Managed and From ~/.aws/config sections. The selected profile fills the right with Basic Info, Credentials, and Advanced, plus Edit and Delete on managed profiles.
Advanced OptionsRetry Mode, Max Attempts, CA Bundle, FIPS and dualstack endpoints, and a Role Assumption Chain builder with Session Name, External ID, Duration, and MFA Serial per step.
One popover for workspacesThe connection in the status bar opens the Workspaces popover. Each connected row has Disconnect and an edit pencil, Connect a workspace brings back one you set aside or adds a new one, and Manage Profiles opens the profile manager. Adding and editing share one dialog for the profile, region, name, icon, color, and table prefixes.
Environment badges on profilesprod, staging, and dev badges on classified profiles in the status bar, the Workspaces popover, and the manager, so the risky account is never a surprise.
Same account, one workspaceTwo workspaces that reach the same AWS account and region are offered a merge, never merged on their own. A profile that disappears from ~/.aws/config marks its workspace Profile missing rather than losing anything.

Goes well with

Every account, one keyring away.

Download Free