{
  "name": "aws-vault",
  "description": "A vault for securely storing and accessing AWS credentials in development environments",
  "subcommands": [
    {
      "name": "add",
      "description": "Add credentials to the secure keystore",
      "args": [
        {
          "name": "profile",
          "description": "The profile you want to add"
        }
      ]
    },
    {
      "name": "remove",
      "description": "Remove credentials from the secure keystore",
      "options": [
        {
          "names": [
            "-f",
            "--force"
          ],
          "description": "Force-remove the profile without a prompt"
        }
      ],
      "args": [
        {
          "name": "profile"
        }
      ]
    },
    {
      "name": "list",
      "description": "List profiles, along with their credentials and sessions",
      "options": [
        {
          "names": [
            "--profiles"
          ],
          "description": "Show only the profile names"
        },
        {
          "names": [
            "--sessions"
          ],
          "description": "Show only the session names"
        },
        {
          "names": [
            "--credentials"
          ],
          "description": "Show only the profiles with stored credential"
        }
      ]
    },
    {
      "name": "rotate",
      "description": "Rotate credentials",
      "options": [
        {
          "names": [
            "-n",
            "--no-session"
          ],
          "description": "Use master credentials, no session or role used"
        }
      ],
      "args": [
        {
          "name": "profile"
        }
      ]
    },
    {
      "name": "exec",
      "description": "Execute a command with AWS credentials",
      "options": [
        {
          "names": [
            "-d",
            "--duration"
          ],
          "description": "Duration of the temporary or assume-role session. Defaults to 1h",
          "takes_arg": true,
          "arg": {
            "name": "DURATION"
          }
        },
        {
          "names": [
            "-n",
            "--no-session"
          ],
          "description": "Use master credentials, no session or role used"
        },
        {
          "names": [
            "--region"
          ],
          "description": "The AWS region",
          "takes_arg": true,
          "arg": {
            "name": "REGION"
          }
        },
        {
          "names": [
            "-t",
            "--mfa-token"
          ],
          "description": "The MFA token to use",
          "takes_arg": true,
          "arg": {
            "name": "MFA-TOKEN"
          }
        }
      ],
      "args": [
        {
          "name": "profile"
        },
        {
          "name": "command"
        }
      ]
    },
    {
      "name": "export",
      "description": "Export AWS credentials",
      "args": [
        {
          "name": "profile"
        }
      ]
    },
    {
      "name": "clear",
      "description": "Clear temporary credentials from the secure keystore",
      "args": [
        {
          "name": "profile"
        }
      ]
    },
    {
      "name": "login",
      "description": "Generate a login link for the AWS Console",
      "args": [
        {
          "name": "profile"
        }
      ]
    },
    {
      "name": "help",
      "description": "Show help about the command",
      "args": [
        {
          "name": "command"
        }
      ]
    }
  ],
  "options": [
    {
      "names": [
        "--help"
      ],
      "description": "Show context-sensitive help (also try --help-long and --help-man)"
    },
    {
      "names": [
        "--version"
      ],
      "description": "Show application version"
    },
    {
      "names": [
        "--debug"
      ],
      "description": "Show debugging output"
    }
  ]
}
