Logging into SSO from a script only when needed?

[kaihendry]

Say I have a script that requires sso login to work. My expectation is that if I already have valid tokens aws sso login would be fast, instead the behaviour on aws-cli/2.17.64 Python/3.12.6 Darwin/23.6.0 source/arm64 is to login AGAIN. A workaround is something like:

profile=${1:-mine}
echo $profile
aws --profile $profile sts get-caller-identity || (BROWSER="chrome --profile-directory='Profile 2' %s" aws --profile $profile sso login)
aws --profile $profile s3 ls

Could it please be improved?

Tbh I am not sure how to see my valid tokens since I work across many profiles / roles.