Management and Governance
CoreAWS Command Line Interface (AWS CLI)
Command-line tool for calling AWS service APIs with configured credentials, Region, and output settings.
Key points
- Uses the AWS credential and configuration provider chain.
- Commands invoke AWS APIs and remain subject to the same principal permissions as SDK calls.
- Prefer profiles, roles, and temporary credentials over keys embedded in scripts.
Best-known use cases
- Invoke and inspect AWS service operations during development.
- Run repeatable commands in build or deployment workflows.
What candidates often confuse it with
- AWS CLI is a command client; AWS SDKs embed service calls in application code.
- CloudShell is one hosted environment in which AWS CLI can run.
Key takeaway
Use AWS CLI for authenticated repeatable service operations without treating it as an application runtime.
Related services
- AWS CloudShell
- AWS Identity and Access Management (IAM)
- AWS Security Token Service (AWS STS)
Relevant exam tasks
- D1.1 — Develop code for applications hosted on AWS
- 1.1.9 — Write code that interacts with AWS services by using APIs and AWS SDKs
- D2.1 — Implement authentication and/or authorization for applications and AWS services
- 2.1.3 — Configure programmatic access to AWS
- 2.1.4 — Make authenticated calls to AWS services