AWS基礎 #4 AWS CLI と SDK のセットアップ

brew install awscli

curl "https://awscli.amazonaws.com/AWSCLIV2.pkg" -o "AWSCLIV2.pkg"
sudo installer -pkg AWSCLIV2.pkg -target /

curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

winget install -e --id Amazon.AWSCLI

aws --version
# aws-cli/2.x.x Python/3.x.x ...

aws configure
# AWS Access Key ID [None]: AKIA...
# AWS Secret Access Key [None]: wJal...
# Default region name [None]: ap-northeast-1
# Default output format [None]: json

~/.aws/credentials   # キー (機密)
~/.aws/config        # region / output / role など

[default]
aws_access_key_id = AKIA...
aws_secret_access_key = wJal...

[default]
region = ap-northeast-1
output = json

aws configure --profile dev
aws configure --profile prod

[default]
aws_access_key_id = AKIA...

[dev]
aws_access_key_id = AKIA-DEV-...
aws_secret_access_key = ...

[prod]
aws_access_key_id = AKIA-PROD-...
aws_secret_access_key = ...

aws s3 ls --profile prod

export AWS_PROFILE=prod
aws s3 ls

function awsenv() {
  export AWS_PROFILE=$1
  echo "AWS_PROFILE=$AWS_PROFILE"
}
# 使い方: awsenv prod

PROMPT='%n@%m %1~ ${AWS_PROFILE:+[aws:$AWS_PROFILE]} %# '

[profile prod]
role_arn = arn:aws:iam::222222222222:role/AdminRole
source_profile = default
mfa_serial = arn:aws:iam::111111111111:mfa/curtis
region = ap-northeast-1

aws s3 ls --profile prod
# Enter MFA code for arn:aws:iam::111111111111:mfa/curtis: 123456
# (この後 1 時間キャッシュ)

export AWS_ACCESS_KEY_ID=AKIA...
export AWS_SECRET_ACCESS_KEY=...
export AWS_REGION=ap-northeast-1
aws s3 ls

1. コマンドラインオプション (--profile、--region など)
2. 環境変数              (AWS_ACCESS_KEY_ID など)
3. アシスタントファイル  (CLI Web Identity Token、Container Credentials)
4. ~/.aws/credentials の default または指定プロファイル
5. ~/.aws/config のプロファイル (role_arn、sso_session など)
6. EC2 / ECS / Lambda のインスタンス / コンテナ認証情報

aws sts get-caller-identity
# {
#   "UserId": "AIDA...",
#   "Account": "111111111111",
#   "Arn": "arn:aws:iam::111111111111:user/curtis"
# }

aws ec2 describe-instances --output json   # デフォルト
aws ec2 describe-instances --output table  # 人間用
aws ec2 describe-instances --output text   # grep / awk 用
aws ec2 describe-instances --output yaml   # YAML

aws ec2 describe-instances \
  --query 'Reservations[].Instances[?State.Name==`running`].[InstanceId,InstanceType]' \
  --output table

aws sts get-caller-identity
aws configure list
aws configure list-profiles

aws s3 ls                              # すべてのバケット
aws s3 ls s3://my-bucket/              # バケット内
aws s3 cp file.txt s3://my-bucket/     # アップロード
aws s3 sync ./local s3://my-bucket/    # フォルダ同期
aws s3 rm s3://my-bucket/file.txt      # 削除
aws s3 presign s3://my-bucket/file.pdf --expires-in 3600

aws ec2 describe-instances
aws ec2 start-instances --instance-ids i-...
aws ec2 stop-instances --instance-ids i-...
aws ec2 describe-regions --query 'Regions[].RegionName'

aws iam list-users
aws iam get-user --user-name curtis
aws iam list-attached-user-policies --user-name curtis
aws iam create-access-key --user-name curtis

pip install boto3

import boto3

s3 = boto3.client("s3")
res = s3.list_buckets()
for b in res["Buckets"]:
    print(b["Name"])

session = boto3.Session(profile_name="prod", region_name="ap-northeast-1")
s3 = session.client("s3")

s3 = boto3.client("s3")
res = s3.list_objects_v2(Bucket="my-bucket")
for obj in res.get("Contents", []):
    print(obj["Key"])

s3 = boto3.resource("s3")
for obj in s3.Bucket("my-bucket").objects.all():
    print(obj.key)

s3 = boto3.client("s3")
paginator = s3.get_paginator("list_objects_v2")
for page in paginator.paginate(Bucket="my-bucket"):
    for obj in page.get("Contents", []):
        print(obj["Key"])

npm install @aws-sdk/client-s3

import { S3Client, ListBucketsCommand } from "@aws-sdk/client-s3";

const client = new S3Client({ region: "ap-northeast-1" });
const res = await client.send(new ListBucketsCommand({}));
for (const b of res.Buckets ?? []) {
  console.log(b.Name);
}

go get github.com/aws/aws-sdk-go-v2/aws
go get github.com/aws/aws-sdk-go-v2/config
go get github.com/aws/aws-sdk-go-v2/service/s3

package main

import (
    "context"
    "fmt"

    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/service/s3"
)

func main() {
    ctx := context.Background()
    cfg, err := config.LoadDefaultConfig(ctx, config.WithRegion("ap-northeast-1"))
    if err != nil {
        panic(err)
    }
    client := s3.NewFromConfig(cfg)
    res, err := client.ListBuckets(ctx, &s3.ListBucketsInput{})
    if err != nil {
        panic(err)
    }
    for _, b := range res.Buckets {
        fmt.Println(*b.Name)
    }
}

autoload bashcompinit && bashcompinit
autoload -Uz compinit && compinit
complete -C "$(which aws_completer)" aws

complete -C "$(which aws_completer)" aws

boto3.client("s3", aws_access_key_id="AKIA...", aws_secret_access_key="...")