AWS SSO Launcher is a free Chrome extension that puts every account, role, and region in your browser toolbar — no more hunting through the SSO portal.
Add to Chrome — it's freeIf you manage more than a handful of AWS accounts, you know the friction: open the SSO portal, find the account, pick the role, wait for the redirect. Repeat for every account switch, every day.
AWS SSO Launcher eliminates all of it. Configure your accounts once, then launch any Console session in a single click — with the right region already set.
Click any account in the popup to open its AWS Console immediately. Use the quick-launch button for defaults or the edit button to choose a different role, region, or destination before opening.
Define multiple AWS organizations, each with its own SSO endpoint and default role. Accounts inherit settings from their organization — override only what's different.
Configure altRoles on any organization to get a role dropdown in the popup. Switch between Administrator, ReadOnly, PowerUser, or any custom role without touching the Options page.
The region selector covers all commercial AWS regions, organized by geography — US, Canada, South America, Europe, Asia Pacific, Middle East & Africa.
Automatically detects which account you're working in on any console.aws.amazon.com page using 12 independent detection methods (DOM, URL, cookies, global variables, and more). No localStorage, no tracking.
Organize accounts into named groups that appear as collapsible sections in the popup. The search box filters across all groups and accounts in real time — by name, account ID, or group.
Every account has a quick-open button (same tab) and a new-tab button. Both build the correct SSO redirect URL automatically.
A one-click copy button on every account row puts the 12-digit account ID in your clipboard.
Back up your full configuration to a dated JSON file from the Options page. Restore it on any machine in seconds.
The extension monitors session age and requests a refresh before expiry, so your cached session stays current while you work.
AWS SSO Launcher uses a simple INI-style format — no JSON, no YAML. Two fields: organizations and accounts.
Organizations
[MyOrg]
region = us-east-1
roleName = Administrator
baseURL = https://d-XXXXXXXXXX.awsapps.com
altRoles = ReadOnly, PowerUser
default = true
Accounts
[Production]
aws_account_id = 123456789012
defaults = MyOrg
group = Production
[Staging]
aws_account_id = 987654321098
defaults = MyOrg
group = Dev
region = us-west-2
roleName = PowerUser
Accounts inherit region, role, and SSO URL from their organization. Override any property at the account level.
chrome.storage.local with automatic fallback for large configurationsstorage, tabs — nothing elseQuestions or issues? Open a ticket on GitHub.
Built by MacondoTek · Version 1.1.9 · MIT License