signing-in-to-aws

Configures short-term AWS CLI credentials using the aws login command.

Updated Jul 21, 2026
One-click install
npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill signing-in-to-aws-richardnroman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: signing-in-to-aws
Source: https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform/tree/main/.agents/skills/signing-in-to-aws
Command: npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill signing-in-to-aws-richardnroman

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Developers frequently hit missing or expired AWS credential errors (AccessDeniedException, expired tokens) when running CLI or SDK operations locally, and manually managing long-term access keys is insecure and tedious. ## Core Features & Use Cases - Guided aws login flow: Checks CLI version (requires 2.32.0+), inspects current credentials with aws sts get-caller-identity, and runs aws login after user confirmation. - Short-term auto-rotating credentials: Credentials refresh every 15 minutes and remain valid up to 12 hours, avoiding plaintext long-term keys on disk. - Error handling and edge cases: Covers missing CLI, browser not opening (aws login --remote), IAM permission errors (SignInLocalDevelopmentAccess policy), GovCloud/China region limitations, and coexistence with existing aws sso login workflows. - Use Case: A developer runs a deployment script and gets an AccessDeniedException; the assistant diagnoses the expired session, confirms with the user, runs aws login, and verifies the new identity. ## Quick Start Ask the assistant to set up AWS credentials for local development by signing in with aws login.

Frequently Asked Questions about signing-in-to-aws

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get AWS credentials for CLI access?▼

Run aws login with AWS CLI version 2.32.0 or later to get short-term credentials that auto-rotate every 15 minutes and stay valid up to 12 hours. Verify success afterward with aws sts get-caller-identity.

What is the difference between aws login and aws sso login?▼

aws sso login is for organizations using AWS IAM Identity Center with profiles pointing at an SSO start URL, while aws login provides short-term credentials for root users, IAM users, and IAM federation. If you have an existing SSO workflow, keep using aws sso login.

Why does aws login fail with a permission error?▼

The IAM identity needs the SignInLocalDevelopmentAccess managed policy attached to the user, role, or group. Root users do not need it. Ask your administrator to attach the policy, or attach it yourself if you have IAM permissions.

Does aws login work in GovCloud or China regions?▼

No, aws login is not available in AWS GovCloud (US) or AWS China regions. In those partitions, fall back to aws configure with long-term access keys, understanding they persist on disk and never expire automatically.

What should I do if the browser does not open during aws login?▼

Use aws login --remote, which provides a URL and code for cross-device authentication. This is useful on remote servers or environments without a local browser.

When should I not use aws login for credentials?▼

Do not use aws login for CI/CD pipelines, which need IAM roles or OIDC federation instead. It is designed for interactive local development, not automated or headless build systems.