Stop Copy-Pasting AWS Credentials: Leapp Keeps Your Cloud Access Sane
If you juggle more than one cloud account, you know the ritual: dig through the console, generate a set of credentials, paste them into a config file, and hope you remember to rotate them before they expire. Do that across a handful of accounts and environments, and it becomes its own part-time job. Leapp is a desktop app that takes over that job for you—generating, storing, and rotating cloud credentials in one encrypted place.
What It Does
Leapp is a cross-platform cloud access app built on Electron, and it runs on macOS, Windows, and Linux. Its purpose is narrow and clear: manage and secure cloud access in multi-account environments. Instead of hand-managing credentials, you let the app generate them and keep them organized.
Under the hood, your data is stored locally and encrypted in the OS System Vault—the same keychain or credential store your operating system already maintains. The app supports multiple cloud-access strategies, handles automatic rotation of short-lived credentials, and can provision sessions automatically from AWS Single Sign-On. It also ships a CLI, so you can manage Leapp from the terminal if that's where you prefer to live.
Why It's Cool
A few things stand out here, and they're mostly about respecting how people actually work with the cloud.
-
Credentials in one click. The core loop is simple: generate what you need without leaving the app or hand-assembling a session token. For anyone who switches between accounts several times a day, that adds up fast.
-
Encryption where it belongs. Storing secrets in the OS System Vault rather than a bespoke encrypted file is a sensible call. You're leaning on infrastructure that's already hardened and already integrated with the platform, instead of trusting a homegrown solution.
-
Short-lived credentials that rotate themselves. This is the part that matters most for security hygiene. Short-lived credentials are good practice, but they're a pain to manage by hand. Automating the rotation removes the main reason people fall back to long-lived keys.
-
SSO session provisioning. If your organization uses AWS Single Sign-On, Leapp can spin up sessions automatically, which means fewer manual steps between you and the account you need.
-
Multi-console browsing. There are browser extensions for Firefox and Chrome (plus Chromium-based browsers) that let you open the AWS console for several different accounts at once. If you've ever been stuck logging out to log back in as a different account, you'll appreciate this.
-
EC2 access without the detour. You can connect to EC2 instances directly from the app rather than bouncing through your usual toolchain.
-
It's extensible. There's a plugin system with a template repository, so you can tailor the app's functionality to your own workflow rather than waiting on the maintainers.
How to Try It
Getting started is straightforward—Leapp is a packaged desktop app, so there's nothing to compile unless you want to.
- Head to the installation docs and grab the build for your platform (macOS, Linux, or Windows).
- Install it like any other desktop application.
- Configure your cloud-access strategy—the configuration docs walk through the supported methods.
- If you use AWS SSO, set up the integration so sessions provision automatically.
- Optionally, install the browser extension for multi-console access and try the CLI if you'd rather script things.
If you'd prefer to build it yourself, the contributing guidelines cover compilation, and the development guidelines are there if you want to dig into the code. The repository lives at github.com/noovolari/leapp, and there's a Slack community if you get stuck.
Final Thoughts
Leapp isn't trying to be everything—it's a focused tool for a specific, recurring headache: managing credentials across many cloud accounts without losing your grip on security. If you're a developer, SRE, or platform engineer who spends real time switching between AWS accounts, the combination of one-click generation, OS-level encryption, and automatic rotation is worth a look. It's an Electron app, so set your expectations accordingly on resource use, but the design choices here are sound. If your credential workflow currently involves a lot of copy-paste and crossed fingers, this is a reasonable place to start fixing that.
Follow @githubprojects for more developer tools and open source projects.