AWS CLI

S3

Simple Storage Service

9commands

IAM

Identity and Access Management

Lambda

Serverless functions

CloudWatch

Monitoring and logs

ECS

Elastic Container Service

7commands

RDS

Relational Database Service

EKS

Elastic Kubernetes Service

DynamoDB

NoSQL database service

SSM

Systems Manager

Install AWS CLI (macOS)

$ brew install awscli

Install AWS CLI using Homebrew on macOS

Configure credentials

$ aws configure

Set up AWS access key, secret key, and default region

Verify configuration

$ aws sts get-caller-identity

Verify AWS credentials by getting current user identity

List instances

$ aws ec2 describe-instances --query 'Reservations[].Instances[].[InstanceId,State.Name,Tags[?Key==`Name`].Value|[0]]' --output table

List instances with ID, state, and name.

Start instance

$ aws ec2 start-instances --instance-ids i-xxx

Start a stopped EC2 instance.

Stop instance

$ aws ec2 stop-instances --instance-ids i-xxx

Stop a running EC2 instance.

Terminate instance

$ aws ec2 terminate-instances --instance-ids i-xxx

Permanently delete an instance.

Get public IP

$ aws ec2 describe-instances --instance-ids i-xxx --query 'Reservations[].Instances[].PublicIpAddress' --output text

Get public IP address of instance.

List security groups

$ aws ec2 describe-security-groups --output table

List all security groups.

Create key pair

$ aws ec2 create-key-pair --key-name mykey --query 'KeyMaterial' --output text > mykey.pem

Create and save SSH key pair.

List AMIs

$ aws ec2 describe-images --owners self amazon --filters 'Name=name,Values=*ubuntu*' --query 'Images[*].[ImageId,Name]' --output table

Search for AMIs by name pattern.

List buckets

$ aws s3 ls

List all S3 buckets.

List bucket contents

$ aws s3 ls s3://bucket-name/ --recursive

List all objects in bucket.

Copy to S3

$ aws s3 cp file.txt s3://bucket/path/

Upload file to S3.

Copy from S3

$ aws s3 cp s3://bucket/file.txt ./

Download file from S3.

Sync to S3

$ aws s3 sync ./dist s3://bucket-name --delete

Sync directory, deleting removed files.

Create bucket

$ aws s3 mb s3://my-new-bucket --region us-east-1

Create new S3 bucket.

Delete bucket

$ aws s3 rb s3://bucket-name --force

Delete bucket and all contents.

Presigned URL

$ aws s3 presign s3://bucket/file.txt --expires-in 3600

Generate temporary download URL.

Get bucket size

$ aws s3 ls s3://bucket --recursive --summarize | tail -2

Show total bucket size and object count.

Get caller identity

$ aws sts get-caller-identity

Show current account and user/role info.

List users

$ aws iam list-users --output table

List all IAM users.

List roles

$ aws iam list-roles --query 'Roles[*].[RoleName,Arn]' --output table

List all IAM roles.

Assume role

$ aws sts assume-role --role-arn arn:aws:iam::123:role/name --role-session-name session

Get temporary credentials for role.

List attached policies

$ aws iam list-attached-user-policies --user-name myuser

Show policies attached to user.

Create access key

$ aws iam create-access-key --user-name myuser

Create new access key for user.

List functions

$ aws lambda list-functions --output table

List all Lambda functions.

Invoke function

$ aws lambda invoke --function-name myfunction --payload '{}' output.json

Invoke Lambda with payload.

Invoke async

$ aws lambda invoke --function-name myfunction --invocation-type Event --payload '{}' output.json

Invoke Lambda asynchronously.

Update function code

$ aws lambda update-function-code --function-name myfunction --zip-file fileb://function.zip

Deploy new code from zip file.

Get function config

$ aws lambda get-function-configuration --function-name myfunction

Show function configuration.

Tail logs

$ aws logs tail /aws/lambda/myfunction --follow

Stream CloudWatch logs.

List log groups

$ aws logs describe-log-groups --output table

List all log groups.

Tail logs

$ aws logs tail /aws/lambda/myfunction --follow --since 1h

Stream logs from last hour.

Filter logs

$ aws logs filter-log-events --log-group-name /my/log/group --filter-pattern 'ERROR'

Search logs for pattern.

List alarms

$ aws cloudwatch describe-alarms --output table

List all CloudWatch alarms.

Get metrics

$ aws cloudwatch get-metric-statistics --namespace AWS/EC2 --metric-name CPUUtilization --dimensions Name=InstanceId,Value=i-xxx --start-time 2024-01-01T00:00:00Z --end-time 2024-01-02T00:00:00Z --period 3600 --statistics Average

Get metric statistics.

Start Insights query

$ aws logs start-query --log-group-name /aws/lambda/myfunction --start-time $(date -u -d "1 hour ago" +%s) --end-time $(date -u +%s) --query-string "fields @timestamp, @message | filter @type = \"ERROR\"" --query QueryId --output text

Start CloudWatch Logs Insights query.

Get query results

$ aws logs get-query-results --query-id <query-id>

Retrieve Insights query results by ID.

Tail logs

$ aws logs tail /aws/lambda/myfunction --follow --since 1h

Stream logs in real-time with follow mode.

List clusters

$ aws ecs list-clusters

List all ECS clusters.

List services

$ aws ecs list-services --cluster mycluster

List services in cluster.

Describe service

$ aws ecs describe-services --cluster mycluster --services myservice

Get service details.

Force deployment

$ aws ecs update-service --cluster mycluster --service myservice --force-new-deployment

Force new deployment.

Scale service

$ aws ecs update-service --cluster mycluster --service myservice --desired-count 3

Change desired task count.

List tasks

$ aws ecs list-tasks --cluster mycluster --service myservice

List running tasks.

Execute command

$ aws ecs execute-command --cluster mycluster --task task-id --container container --interactive --command '/bin/sh'

Open shell in container.

List instances

$ aws rds describe-db-instances --query 'DBInstances[*].[DBInstanceIdentifier,DBInstanceStatus,Engine]' --output table

List RDS instances with status.

Start instance

$ aws rds start-db-instance --db-instance-identifier mydb

Start stopped RDS instance.

Stop instance

$ aws rds stop-db-instance --db-instance-identifier mydb

Stop RDS instance.

Create snapshot

$ aws rds create-db-snapshot --db-instance-identifier mydb --db-snapshot-identifier mydb-snapshot

Create manual snapshot.

List snapshots

$ aws rds describe-db-snapshots --db-instance-identifier mydb

List snapshots for instance.

Get endpoint

$ aws rds describe-db-instances --db-instance-identifier mydb --query 'DBInstances[0].Endpoint.Address' --output text

Get database endpoint.

List clusters

$ aws eks list-clusters --region us-east-1 --output table

List all EKS clusters in region.

Describe cluster

$ aws eks describe-cluster --name production-cluster --region us-east-1 --query 'cluster.[status,version,endpoint]' --output table

Get detailed cluster information and status.

Update kubeconfig

$ aws eks update-kubeconfig --name production-cluster --region us-east-1 --alias prod-eks

Configure kubectl to access EKS cluster.

Create node group

$ aws eks create-nodegroup --cluster-name production-cluster --nodegroup-name app-nodes --node-role arn:aws:iam::123456789:role/EKSNodeRole --subnets subnet-xxx subnet-yyy --scaling-config minSize=2,maxSize=10,desiredSize=3 --instance-types t3.medium

Create managed node group with autoscaling.

Batch get items

$ aws dynamodb batch-get-item --request-items file://items.json --return-consumed-capacity TOTAL

Read multiple items across tables efficiently.

Batch write items

$ aws dynamodb batch-write-item --request-items file://batch-write.json --return-consumed-capacity TOTAL

Bulk insert/delete up to 25 items per request.

Query with conditions

$ aws dynamodb query --table-name Users --key-condition-expression "PK = :pk AND SK BEGINS_WITH :sk" --expression-attribute-values '{":pk":{"S":"USER#123"},":sk":{"S":"ORDER#"}}' --projection-expression "OrderId,Amount"

Query with partition key and sort key conditions.

Transact write items

$ aws dynamodb transact-write-items --transact-items file://transaction.json --return-consumed-capacity TOTAL

Execute ACID transactions across items.

Get parameter

$ aws ssm get-parameter --name /app/database/password --with-decryption --query Parameter.Value --output text

Retrieve parameter value with KMS decryption.

Put secure parameter

$ aws ssm put-parameter --name /app/api/key --value "secret-value" --type SecureString --key-id alias/aws/ssm --overwrite

Store encrypted parameter with KMS.

Get parameters by path

$ aws ssm get-parameters-by-path --path /app/config/ --recursive --with-decryption --query 'Parameters[*].[Name,Value]' --output table

Retrieve all parameters under a path hierarchy.

Delete parameter

$ aws ssm delete-parameter --name /app/deprecated/old-key

Remove parameter from Parameter Store.

Discussion

Loading comments...

AWS CLI

Manage AWS cloud resources from the terminal. EC2, S3, Lambda, IAM, and infrastructure automation with the AWS CLI.

65 commands

Browse by Topic

Getting Started

Quick setup and installation

3commands

EC2

Elastic Compute Cloud

S3

Simple Storage Service

9commands

IAM

Identity and Access Management

Lambda

Serverless functions

CloudWatch

Monitoring and logs

ECS

Elastic Container Service

7commands

RDS

Relational Database Service

EKS

Elastic Kubernetes Service

DynamoDB

NoSQL database service

SSM

Systems Manager