1.01 AWS CLI for Terraform

Question 1

1. When you run aws configure command without --profile, it saves credentials under the _ profile.
2. When you run aws configure --profile dev-account, it saves credentials under _ profile.

Answer 1

1. default
2. dev-account

Question 2

Run command aws s3 ls but for the “dev-account” profile.

Answer 2

aws s3 ls --profile dev-account

Question 3

You want all aws commands in your current shell session to use a specific profile: “dev-account”. How will you set the environment variable temporarily and later unset?

Answer 3

To set:

export AWS_PROFILE=dev-account

To unset:

unset AWS_PROFILE

Question 4

How to check which profile is active?

Answer 4

echo $AWS_PROFILE

Question 5

How to configure aws cli with credentials?

Answer 5

aws configure

This stores your credentials (aws_access_key_id & aws_secret_access_key) profile-wise in ~/.aws/credentials and your region & output settings profile-wise in ~/.aws/config.

Question 6

How to check/confirm that your CLI is correctly authenticated (without opening the AWS Management Console)?

Answer 6

aws sts get-caller-identity

it returns a JSON object with your Account and ARN

Question 7

State File Integrity: Terraform uses a _ file to map your code to real-world AWS resources. If two people change the code at once without a shared state, the file becomes corrupted, leading to resource _ .
.

Answer 7

1. terraform.tfstate
2. corruption