Skip to content

Latest commit

 

History

History
19 lines (16 loc) · 1.55 KB

how-to-setup-aws-sso-credentials.md

File metadata and controls

19 lines (16 loc) · 1.55 KB
Raw

How to set up AWS SSO credentials

This document describes the process of setting up credentials for your local AWS CLI. This will enable you to interact directly with our infrastructure using the CLI, as well as provision infrastructure using Pulumi.

Process

As part of onboarding, you should be set up to access AWS via the SSO portal. Please ensure that you have set up and enabled MFA.

  1. Download the AWS CLI - see https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html
  2. Run aws configure sso - some of the required details can be found via the SSO portal in the 'Access keys' section:
    • e.g. SSO start URL and SSO Region are listed under AWS IAM Identity Center credentials (Recommended).
    • SSO registration scopes can be left as the default (sso:account:access).
  3. Allow access from the authorisation page that should open in your browser.
  4. You should be prompted for more details in the terminal:
    • CLI default client region should be eu-west-2
    • CLI default output format should be json
    • For the CLI profile name field, please use the format planx-<STACK>, e.g. planx-staging
  5. Repeat for all environments (staging, production)
  6. Test! You should be able to call commands using the CLI, for example aws sts get-caller-identity --profile planx-staging and get the expected result.

Occasionally, you'll be prompted to refresh your credentials, this can be done via aws sso login --profile <PROFILE>