AWS CLI
A unified command-line tool provided by Amazon Web Services for managing and operating AWS cloud service resources through a terminal interface, supporting scripted and automated operations and administration tasks.
Timeline (last 90 days)
AWS CLI is the official command-line interface provided by Amazon, allowing users to call AWS APIs directly through commands.
Lazy AWS is an open-source tool that consolidates AWS resource browsing, inspection, and CLI operation execution into a keyboard-driven terminal interface.
AWS CLI uses the ~/.aws/credentials and ~/.aws/config files, or obtains access keys through environment variables, IAM Roles, and other means.
DynamoDB is a service accessed entirely through APIs, and all operations can be done in the terminal via the AWS CLI.
The DynamoDB CLI writes items using typed JSON, with strings written as {"S": "..."} and numbers as {"N": "2"}; the numeric value itself is transmitted as a string, and writing {"N": 2} is incorrect.
The `aws sts get-caller-identity` command can confirm the current AWS identity, the Account field in its output is the 12-digit account ID, and the command requires no permissions.
AWS CLI aliases (~/.aws/cli/alias) can replace built-in commands, so aws s3 ls may not be s3 ls.
Checking a draft policy on the command line should use Custom mode, corresponding to aws iam simulate-custom-policy; to test a policy already attached to an identity, use simulate-principal-policy.
aws login requires AWS CLI version no lower than 2.32.0
The CLI and the SDKs for each language refresh the cached credentials every 15 minutes when needed, and the session lasts until the session duration limit set for the IAM principal, up to a maximum of 12 hours.
10 more timeline events
All Facts (20)
Cursor的Agent可以调用终端中安装的任何CLI工具，如GitHub CLI、AWS CLI、Docker等
85%UnverifiedAWS CLI uses the ~/.aws/credentials and ~/.aws/config files, or obtains access keys through environment variables, IAM Roles, and other means.
50%UnverifiedLazy AWS is an open-source tool that consolidates AWS resource browsing, inspection, and CLI operation execution into a keyboard-driven terminal interface.
50%UnverifiedAWS CLI is the official command-line interface provided by Amazon, allowing users to call AWS APIs directly through commands.
50%UnverifiedThe DynamoDB CLI writes items using typed JSON, with strings written as {"S": "..."} and numbers as {"N": "2"}; the numeric value itself is transmitted as a string, and writing {"N": 2} is incorrect.
50%UnverifiedDynamoDB is a service accessed entirely through APIs, and all operations can be done in the terminal via the AWS CLI.
50%UnverifiedThe `aws sts get-caller-identity` command can confirm the current AWS identity, the Account field in its output is the 12-digit account ID, and the command requires no permissions.
50%UnverifiedAWS CLI aliases (~/.aws/cli/alias) can replace built-in commands, so aws s3 ls may not be s3 ls.
50%Unverifiedaws login requires AWS CLI version no lower than 2.32.0
50%UnverifiedThe CLI and the SDKs for each language refresh the cached credentials every 15 minutes when needed, and the session lasts until the session duration limit set for the IAM principal, up to a maximum of 12 hours.
50%Unverifiedaws login --remote is for machines without a browser; the CLI prints a URL for the user to open on another device, and after logging in the authorization code is copied back to the CLI prompt.
50%UnverifiedChecking a draft policy on the command line should use Custom mode, corresponding to aws iam simulate-custom-policy; to test a policy already attached to an identity, use simulate-principal-policy.
50%UnverifiedThe Session credential replacement of aws login is transparent to the consumer; the command syntax is no different from using long-term keys, and the CLI substitutes the credentials used for signing under the hood.
50%UnverifiedWhen using aws login, if another session is already stored in the target profile, the CLI asks whether to overwrite the existing session and waits for the user to input y or n.
50%UnverifiedConfiguring Agent Toolkit for AWS can use the documented CLI command `aws configure agent-toolkit`.
50%UnverifiedCloud provider CLI tools write credentials to ~/.aws/credentials or ~/.config/gcloud/ by default, SSH private keys are typically located at ~/.ssh/, and these paths are readable by any process running under the same user without requiring privilege escalation.
50%UnverifiedBefore connecting to AWS MCP Server, you need an active AWS account, a configured AWS CLI, and either a Claude Code or Claude Desktop client.
50%UnverifiedBefore executing the update-user downgrade, it is necessary to ensure that IAM credentials with quicksight:UpdateUser permissions are configured locally.
50%UnverifiedUsing the AWS CLI command aws quicksight update-user allows in-place modification of user role attributes rather than destroying and recreating the user, thereby preserving the user's asset ownership.
50%UnverifiedThe aws quicksight update-user command requires the --aws-account-id, --namespace, --user-name, and target --role parameters (with values of READER, AUTHOR, or ADMIN).
50%