<commit_before>---
owner_slack: "#govuk-2ndline"
title: Access AWS Console
section: AWS accounts
layout: manual_layout
parent: "/manual.html"
last_reviewed_on: 2019-11-08
review_in: 6 months
---

Accessing AWS is done via a command-line tool called the GDS CLI.

It's a tool that's developed and supported by Reliability Engineering, but open to anyone inside GDS to contribute to. It's written in Go. It's used by many teams across GDS to make daily AWS-related tasks easier.

The (private) GitHub repo is [alphagov/gds-cli](https://github.com/alphagov/gds-cli). There's a [comprehensive README](https://github.com/alphagov/gds-cli#readme).

## Installation

1. Install [Homebrew](https://brew.sh) on macOS or Linux.
1. Run `brew install alphagov/gds/gds-cli` to install from the [GDS Homebrew tap](https://github.com/alphagov/homebrew-gds).
1. Run `gds config yubikey false` if you type AWS MFA codes from your phone.

If you have `bash-completion` installed and configured, the gds-cli tab completions will work out of the box. They're especially useful for long commands like AWS account names.

## Usage for AWS

Work out which [list of users you're part of in govuk-aws-data][govuk-aws-data-users-group].

If you're new to GOV.UK and want to look around in integration:

        gds aws govuk-integration-readonly -l

If you're a PlatformHealthPowerUser and want to generate tokens for deploying Terraform in production, run:

        gds aws govuk-production-platformhealth-poweruser -e

You can also chain commands, like this one to list S3 buckets in integration:

        gds aws govuk-integration-poweruser aws s3 ls

[govuk-aws-data-users-group]: /manual/set-up-aws-account.html#4-get-the-appropriate-access<commit_msg>Tweak manual about using AWS Console<commit_after>---
owner_slack: "#govuk-2ndline"
title: Access AWS Console
section: AWS accounts
layout: manual_layout
parent: "/manual.html"
last_reviewed_on: 2019-11-08
review_in: 6 months
---

Accessing AWS is done via a command-line tool called the GDS CLI.

It's a tool that's developed and supported by Reliability Engineering, but open to anyone inside GDS to contribute to. It's written in Go. It's used by many teams across GDS to make daily AWS-related tasks easier.

The (private) GitHub repo is [alphagov/gds-cli](https://github.com/alphagov/gds-cli). There's a [comprehensive README](https://github.com/alphagov/gds-cli#readme).

## Installation

1. Install [Homebrew](https://brew.sh) on macOS or Linux.
1. Run `brew install alphagov/gds/gds-cli` to install from the [GDS Homebrew tap](https://github.com/alphagov/homebrew-gds).
1. Run `gds config yubikey false` if you type AWS MFA codes from your phone.

If you have `bash-completion` installed and configured, the gds-cli tab completions will work out of the box. They're especially useful for long commands like AWS account names.

## Get Your Role

Work out which [list of users you're part of in govuk-aws-data][govuk-aws-data-users-group].

## Usage

### Web Console

If you're new to GOV.UK and want to look around in integration:

        gds aws govuk-integration-readonly -l

### Terraform

👉 [Deploy AWS infrastructure with Terraform](/manual/deploying-terraform.html)

### Terminal Commands

You can also chain commands, like this one to list S3 buckets in integration:

        gds aws govuk-integration-poweruser aws s3 ls

[govuk-aws-data-users-group]: /manual/set-up-aws-account.html#4-get-the-appropriate-access
{'fraction_non_alphanumeric': 0.09511419485400405, 'fraction_numerical': 0.009251228678808905, 'mean_word_length': 4.148809523809524, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 8, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '1070456', 'n_tokens_mistral': 1135, 'n_tokens_neox': 1074, 'n_words': 417}