# rolle

> Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools, without a secret on disk.

## Docs

- [Introduction](https://getrolle.com/): What rolle does and how it hands credentials to your tools.
- [Install](https://getrolle.com/install): Install the rolle desktop app with Homebrew, a signed DMG, the Windows installer, or the Linux AppImage, plus the CLI.
- [Quickstart](https://getrolle.com/quickstart): Connect AWS, Azure, or Google Cloud, import what your machine already has, and start a role your tools can use in one click.
- [CLI reference](https://getrolle.com/cli): Every rolle command.
- [Security model](https://getrolle.com/security): Where secrets live and what never touches disk.
- [Roadmap](https://getrolle.com/roadmap): What works and what does not yet.
- [Troubleshooting](https://getrolle.com/troubleshooting): Known situations and what to do about them.

## Desktop app

- [Dashboard](https://getrolle.com/desktop/dashboard): The session table, favorites, filters, and row actions.
- [Settings](https://getrolle.com/desktop/settings): General, Appearance, About, and Advanced settings.
- [Import](https://getrolle.com/desktop/import): Bring in what your machine already has.

## AWS

- [IAM Identity Center](https://getrolle.com/aws/identity-center): Sign in to an Identity Center portal and get every account and role you can reach.
- [Assume a role](https://getrolle.com/aws/assume-role): Chain AssumeRole from any AWS session.
- [IAM user](https://getrolle.com/aws/iam-user): Add an IAM user access key, with optional MFA.
- [Profiles and regions](https://getrolle.com/aws/profiles-and-regions): How rolle writes AWS profiles, and how to rename them or change their region.
- [Console and terminal](https://getrolle.com/aws/console): Open the AWS console or a terminal with a session ready.

## Azure

- [Tenants](https://getrolle.com/azure): Sign in to an Entra ID tenant and discover its subscriptions.
- [Sessions](https://getrolle.com/azure/sessions): Start a subscription and use its Azure Resource Manager token.

## Google Cloud

- [Projects](https://getrolle.com/gcp): Reuse gcloud credentials and get a session per project.
- [Service account impersonation](https://getrolle.com/gcp/impersonation): Mint short-lived tokens for a service account from your own credentials.

## Agent resources

- [llms-full.txt](https://getrolle.com/llms-full.txt): The full Markdown of every page in one file.
- [Page Markdown](https://getrolle.com/index.md): Append `.md` to any page URL to fetch that page as raw Markdown.
- [JSON API](https://getrolle.com/api/docs/pages.json): Page index of the JSON docs API; each entry links the page's JSON and Markdown forms. Described by the OpenAPI document at https://getrolle.com/openapi.json.
- [API catalog](https://getrolle.com/.well-known/api-catalog): RFC 9727 linkset of the APIs documented here.
- [agent-readability.json](https://getrolle.com/agent-readability.json): Manifest of every agent-facing artifact on this site.
- [Sitemap](https://getrolle.com/sitemap.xml): Every indexable page URL with its last-modified date.