signing-in-to-aws

Configures short-term AWS CLI credentials using the aws login command.

1|Updated Aug 1, 2024
One-click install
npx skills add https://github.com/obispobruno/dotfiles --skill signing-in-to-aws-obispobruno
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: signing-in-to-aws
Source: https://github.com/obispobruno/dotfiles/tree/main/dot_agents/skills/signing-in-to-aws
Command: npx skills add https://github.com/obispobruno/dotfiles --skill signing-in-to-aws-obispobruno

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Developers often hit missing or expired AWS credential errors when running CLI or SDK commands locally. This Skill guides the authentication flow using aws login, which provides short-term, auto-rotating credentials without manual key management. ## Core Features & Use Cases - Guided Authentication: Runs precondition checks (CLI version, current identity) and executes aws login with user confirmation. - Credential Verification: Confirms successful login via aws sts get-caller-identity and advises on profile usage. - Error Handling: Covers browser failures (aws login --remote), missing IAM permissions (SignInLocalDevelopmentAccess policy), and outdated CLI versions. - Use Case: A developer sees "AccessDeniedException" or "token expired" when running an AWS command. The Skill checks their CLI version, confirms no valid session exists, and runs aws login to restore access in minutes. ## Quick Start Ask the assistant to set up AWS credentials for local development using aws login.

Frequently Asked Questions about signing-in-to-aws

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get AWS credentials for local CLI development?▼

Run `aws login` with AWS CLI 2.32.0 or later to get short-term credentials that auto-rotate every 15 minutes and remain valid up to 12 hours. Verify success afterward with `aws sts get-caller-identity`.

What is the difference between aws login and aws sso login?▼

aws login provides short-term credentials for general local development, while aws sso login is for organizations using AWS IAM Identity Center with SSO-configured profiles. If you have an existing SSO workflow, keep using aws sso login.

What AWS CLI version is required for aws login?▼

The aws login command requires AWS CLI version 2.32.0 or later. Check your version with `aws --version` and update via the official AWS CLI installation guide if needed.

Why does aws login fail with a permission error?▼

A permission error after login means your IAM identity lacks the SignInLocalDevelopmentAccess managed policy. Ask your administrator to attach it to your user, role, or group; root users do not need it.

Does aws login work in GovCloud or China regions?▼

No, aws login is not available in AWS GovCloud (US) or AWS China regions. Users in these partitions should use `aws configure` with long-term access keys instead.

What should I do if the browser does not open during aws login?▼

Use `aws login --remote`, which provides a URL and code for cross-device authentication. This works on remote servers or environments without a local browser.