A Chrome extension that redirects AWS console links through your company's SSO portal so you land in the correct account — no more 403s.
See AccountHop detect the target AWS account from the URL and redirect through IAM Identity Center so the correct console resource opens without manual account switching.
Install from the chrome extensions store: AccountHop for AWS
OR
- Clone this repo
- Open
chrome://extensions, enable Developer mode - Load unpacked → select the
src/directory - Click the extension icon → Settings to configure
You need three things:
| Setting | Example | Notes |
|---|---|---|
| Portal URL | mycompany.awsapps.com |
Just the hostname, no https:// |
| Default Role | Developer |
The permission set name from your portal |
| Account Mappings (Optional) | prod → 123456789012 |
Keywords that map URLs to accounts |
Each mapping has: Keyword, Account ID, Label, and an optional Role Override (if that account uses a different permission set than the default).
When you open an AWS console link, the extension:
- Detects the account — looks for a 12-digit account ID in the URL (query params, path, ARN, embedded service URLs)
- Checks your mappings — if no ID in the URL, matches keywords against your configured rules
- Redirects through the portal — builds a deep link like
https://portal/start/#/console?account_id=...&role_name=...&destination=... - You land on the resource in the correct account context
If the extension can't confidently determine the account, it shows a dropdown banner to pick one manually.
The extension automatically remembers accounts it encounters:
- From browsing — when a URL contains an account ID, it's saved with the service and region for future suggestions
- From your portal — click "Import from Portal" in settings to pull in all your available accounts at once
Learned accounts show up in the chooser and popup but never auto-redirect — only explicit URL detection and keyword mappings do that.
All data stays in local Chrome storage. Nothing is sent externally. The extension only has access to AWS console and portal domains.
If AccountHop makes your day a little easier and you want to help support future improvements, buy me a coffee.