Skip to main content

AWS CLI

AWS CLI (AWS Command Line Interface) is a command line interface for working with AWS services.

Customize AWS CLI

  1. Configure access to S3.
  2. Install the client.
  3. Create an AWS CLI configuration.
  4. Install the certificate.

1. Set up access to S3

Access can be configured by the Account Owner or a user with the role of iam.admin.

  1. Create a service user with role with access to S3. If you have created a service user with the role object_storage_user or s3.bucket.user, the bucket must have a configured access policy and its rules must allow access to this user.
  2. Issue an S3 key to the user.

2. Install the client

Use the Install or update to the latest version of the AWS CLI documentation from Amazon.

3. Create an AWS CLI configuration

  1. Open the terminal.

  2. Open the configuration mode:

    aws configure

  3. Enter the AWS Access Key ID, which is the value of the Access key field from the S3 key.

  4. Enter AWS Secret Access Key - the value of the Secret key field from the S3 key.

  5. Enter Default region name - the pool in which S3 is located (for example, ru-1).

  6. Enter Default output format or leave blank.

  7. The settings will be saved in the configuration files:

    • credentials in .aws/credentials:

      [default]
      aws_access_key_id = <access_key>
      aws_secret_access_key = <secret_key>

    • default pool in .aws/config:

      [default]
         region = <pool>

  8. In the .aws/config file, add the endpoint_url parameter:

    [default]
        region = <pool>
        endpoint_url = https://<s3_domain>

    Specify <s3_domain> - the S3 API domain for the desired pool.

4. Install the certificate

  1. Create a folder ~/.servercores3/:

    mkdir -p ~/.servercores3/

  2. Download the certificate and place it in the ~/.servercores3/ folder:

    wget https://secure.globalsign.net/cacert/root-r6.crt -O ~/.servercores3/root.crt
    openssl x509 -inform der -in ~/.servercores3/root.crt -out ~/.servercores3/root.crt
    chmod 600 ~/.servercores3/root.crt

  3. In the .aws/config configuration file, add a parameter:

    ca_bundle = ~/.servercores3/root.crt

Working with AWS CLI

For the command syntax, see the AWS instructions in Amazon's AWS documentation.

To work with S3 through the AWS CLI, use:

  • s3api - commands corresponding to operations in the REST API;
  • s3 - additional commands that simplify work with a large number of objects.

Output the list of buckets

  1. Open the CLI.

  2. Bring up a list of buckets:

    aws s3 ls

Create a bucket

  1. Open the CLI.

  2. Create a bucket:

    aws s3 mb s3://<bucket_name>

    Specify <bucket_name> is the name of the new bucket.

View list of objects

  1. Open the CLI.

  2. Check out the list of facilities:

    aws s3 ls --recursive s3://<bucket_name>

    Specify <bucket_name> - the name of the bucket where you want to view the list of objects.

Load object

  1. Open the CLI.

  2. Load the object into the buckets:

    aws s3 cp <path_to_object> s3://<bucket_name>/

    Specify:

    • <path_to_object> - path in the baket, where the object will be stored;
    • <bucket_name> - name of the bucket where the object will be stored.

You can get a link to an object in a public or private bucket via a Presigned URL. For more information about Presigned URLs, see Sharing objects with presigned URLs in the AWS documentation.

  1. Open the CLI.

  2. Get the link:

    aws s3 presign s3://<bucket_name>/<path_to_object> --expires-in <time>

    Specify:

    • <bucket_name> - name of the bucket where the object is stored;
    • <path_to_object> - path to the object in the baket;
    • optional: --expires-in <time> - link expiration time, where <time>- time in seconds after which the link will stop working. If you don't add --expires-in <time>, the link will work for one hour.

Copy object

  1. Open the CLI.

  2. Copy the object:

    aws s3 cp s3://<bucket_name_1>/<path_to_object_1> s3://<bucket_name_2>/<path_to_object_2>

    Specify:

    • <bucket_name_1> - name of the bucket where the object to be copied is stored;
    • <path_to_object_1> - path to the object to be copied in the bucket;
    • <bucket_name_2> - name of the bucket to which the object will be copied;
    • <path_to_object_2> - path in the baketable where the object will be stored.

Delete object

  1. Open the CLI.

  2. Delete the object:

    aws s3 rm s3://<bucket_name>/<object_name>

    Specify:

    • <bucket_name> - bucket name;
    • <object_name> - object name.