Editing AWS CLI


== AWS Command Line Tool (CLI) ==
AWS CLI is available in GitHub: https://github.com/aws/aws-cli/releases.

=== Installation ===
* Ubuntu, execute <code>[[apt-get -y install]] awscli</code> and configure it<ref>https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html</ref> use <code>[[aws configure]]</code> and check configuration using <code>[[aws configure list]]</code>.

* Linux installation from Amazon:
 [[apt install]] -y [[curl]] [[unzip]]
 [[curl]] [[-sS]] "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
 [[unzip -q]] awscliv2.zip
 sudo ./aws/install

* <code>[[pip install]] awscli</code>

* [[MacOS]], execute: <code>brew install [[awscli]]</code>

=== AWS CLI configuration ===
First you will need to configure your AWS CLI access: <code>[[aws configure]]</code> or <code>[[aws configure --profile]] your-new-profile-name</code>.
You will be prompted to enter a username and password.
Configuration will be saved in directory <code>$HOME/.aws/</code> in files <code>credentials</code> and <code>config</code>.


Execute <code>aws configure list</code> to view your actual configuration. If you execute for the first time will be something like:

  [[aws configure list]]
      Name                    Value             Type    Location
      ----                    -----             ----    --------
   profile                <not set>             None    None
   access_key             <not set>             None    None
   secret_key             <not set>             None    None
   region                 <not set>             None    None

If you have multiple profiles defined you can list them:
* <code>[[aws configure list-profiles]]</code>

=== Basic [[AWS EC2]] commands <ref>https://docs.aws.amazon.com/cli/latest/reference/ec2/index.html</ref> ===
Before starting to use AWS CLI you will need to configure IAM policies for your user.

* Get a list of EC2 instances: 
:<code>[[aws ec2 describe-instances]]</code>
* Get a list of EC2 instances and filter Name, Id and Status: 
:<code>aws ec2 describe-instances | egrep 'InstanceId|"Name":|"Value":|PublicIp'</code> 

* Create or run an instance
:<code>[[aws ec2 run-instances]]</code> <ref>https://docs.aws.amazon.com/cli/latest/reference/ec2/run-instances.html</ref>

* Start an EC2 instance:
:<code>aws ec2 start-instances --instance-ids i-08cf893bbcfd7dc46</code> (Use your own instance-id)
* Stop an EC2 instance:
:<code>aws ec2 stop-instances --instance-ids i-08cf893bbcfd7dc46</code> (Use your own instance-id)
* Show Relational Database Service (RDS) instances:
:<code>aws rds describe-db-instances</code>
* Query and display EC2 metadata: <code>ec2metadata</code> <ref>https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html</ref> (Distributed in <code>cloud-guest-utils</code> package at least in Debian)

=== Basic [[AWS S3]] commands ===

* List your buckets: <code>aws s3api list-buckets</code>

* List your buckets in all regions: 
<pre>
for region_name in ap-south-1 eu-west-3 eu-west-2 eu-west-1 ap-northeast-2 ap-northeast-1 sa-east-1 ca-central-1 ap-southeast-1 ap-southeast-2 eu-central-1 us-east-1 us-east-2 us-west-1 us-west-2; do 
   aws s3api list-buckets --region $region_name
done
</pre>

* <code>[[aws s3 ls]]</code>
:If you do not have permisssions you will get the following error:
::An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied

* <code>aws s3 ls your_bucket_name</code>
* <code>[[aws --profile]] your_profile_name s3 ls your_bucket_name</code> (You can also use a profile to define your credentials)
* <code>[[aws s3 cp]]</code><ref>https://docs.aws.amazon.com/cli/latest/reference/s3/cp.html</ref>
* Size of a ''Bucket'': <code>aws s3 ls --summarize --human-readable --recursive s3://bucket-name/</code> <ref>https://serverfault.com/a/721197</ref>

=== Basic AWS IAM commands ===
* <code>aws iam list-users</code>
:If you do not have permisssions you will get the following error:
::An error occurred (AccessDenied) when calling the ListUsers operation: User: arn:aws:iam::146910341356:user/MY_USERNAME is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::146910341356:user/
* <code>aws iam list-user-policies --user-name USERNAME</code>


=== Basic AWS Security commands ===
* Authorizing Inbond Traffic from anywhere to TCO port 80<ref>https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/authorizing-access-to-an-instance.html</ref>
:<code>aws ec2 describe-instance-attribute --instance-id YOUR_INSTANCE_ID --attribute groupSet</code>
:<code>aws ec2 authorize-security-group-ingress --group-id YOUR_GROUP_ID --protocol tcp --port 80 --cidr 0.0.0.0/0</code>

=== Basic AWS ECS commands ===
* <code>[[aws ecs list-clusters]]</code>

=== Basic [[AWS Config]] service commands ===
* <code>aws configservice get-status</code>


* [[aws ssm-incidents]]

== Networking ==
* <code>[[aws ec2 describe-subnets]]</code>

== Related terms ==
* <code>[[google-cloud-sdk]]</code> and <code>[[gcloud]]</code>
* <code>[[sam]]</code>
* <code>[[eksctl]]</code>, official AWS cli to manage [[EKS]] clusters
* [[Boto]]
* <code>[[aws sts get-caller-identity]]</code>
* <code>[[suaws]]</code>
* [[auto-prompt]]

==See Also ==
* {{aws cli}}
* {{AWS IaC}}
* {{Cloud CLIs}}


[[Category:Computing]]
[[Category:AWS]]