The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Use aws login to start AWS browser-based sign-in from your terminal and obtain temporary credentials for AWS CLI use. It requires AWS CLI version 2.32.0 or later. It does not directly open the signed-in AWS Management Console interface.
Sign in with AWS console credentials
Run:
aws loginAWS CLI opens your default browser and guides you through authentication, then returns you to the terminal. This flow is for signing in with AWS Management Console credentials so the CLI and supported SDKs can use temporary credentials; it is not a terminal command for launching the console UI. See the AWS Sign-In User Guide and the AWS CLI sign-in guide.
As an Amazon Associate I earn from qualifying purchases.
Check access requirements
- Install AWS CLI version 2.32.0 or later.
- You must be able to sign in to the AWS Management Console as a root user, IAM user, or through IAM federation.
- IAM users, roles, or groups need the
SignInLocalDevelopmentAccessmanaged policy. Root users do not need this policy.
Choose a profile or authenticate remotely
To save the sign-in under a named profile, use:
aws login --profile my-dev-profileIf the terminal device cannot open a browser, run aws login --remote. Complete sign-in in a browser on another device, then enter the authorization code in the CLI.
Know when the session ends
The sign-in session is valid for up to 12 hours, subject to the IAM principal’s configured session duration. During an active session, the CLI and supported SDKs refresh cached credentials. When the session expires, authenticate again. To remove cached credentials, run aws logout; to clear only one profile, run aws logout --profile my-dev-profile.
#1 Best Overall
Use IAM Identity Center instead
If your organization uses IAM Identity Center, configure and sign in with an SSO profile rather than using aws login:
aws configure sso
aws sso login --profile my-profileDuring configuration, provide the organization’s SSO start URL or issuer URL and the Region hosting its Identity Center directory. The CLI opens a browser for authorization. AWS CLI 2.22.0 and later uses PKCE by default for this flow; add --use-device-code to use device authorization instead. After sign-in, the profile’s cached session is used to obtain credentials for the role assigned to you. If those credentials expire, you may need to sign in again. Read AWS’s IAM Identity Center CLI configuration guide.
CloudShell is not a local terminal sign-in command
CloudShell is a browser-based shell launched from an already signed-in AWS Management Console. AWS’s getting-started steps have you sign in to the console, choose a Region, and launch CloudShell from the console interface. It is a separate environment choice, not a command that opens the console from your local terminal. See the AWS CloudShell getting-started guide.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
