Aws sts get-caller-identity

aws sts get-caller-identity command outputs three pieces of information including the ARN.

• https://awscli.amazonaws.com/v2/documentation/api/latest/reference/sts/get-caller-identity.html

Command

• aws sts get-caller-identity
• aws sts get-caller-identity --profile XXXXX
• ACCOUNT_ID=$(aws sts get-caller-identity --output text --query 'Account')

Examples

aws sts get-caller-identity
{
    "UserId": "ZIDBZCTGOUKVXXFNQ5Q3F",
    "Account": "09876543212",
    "Arn": "arn:aws:iam::09876543212:user/your_user"
}

{
    "UserId": "AROASTNMATSFIGC3RFZFC:martin.oscar",
    "Account": "09876543212",
    "Arn": "arn:aws:sts::09876543212:assumed-role/AWSReservedSSO_AdministratorAccess_111111111/your-username"
}

Errors

aws sts get-caller-identity
Unable to locate credentials. You can configure credentials by running "aws configure".

aws sts get-caller-identity
An error ocurred (InvalidClientTokenId) when calling the GetCallerIdentity operation: The security token included in the request is invalid

data.aws_caller_identity.current

• error: You must be logged in to the server (Unauthorized)

Related

• AWS PROFILE
• aws organizations describe-organization
• aws iam list-attached-user-policies
• aws iam get-account-summary
• aws iam list-account-aliases
• aws iam create-account-alias
• aws sts get-session-token
• aws iam get-user

aws ssm get-instance-profile

• An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied
• aws eks get-token

sts:AssumeRole
sts:GetCallerIdentity

• AWS switching to a role

See also

• AWS STS (sts:), aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]