> For the complete documentation index, see [llms.txt](https://docs.wellcomecollection.org/aws-account-setup/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wellcomecollection.org/aws-account-setup/how-to/how-to-select-a-role-in-the-cli.md).

# How to select a role in the AWS CLI

Once you have [CLI credentials](/aws-account-setup/how-to/how-to-get-credentials-for-working-locally.md), you need to configure the roles you want to use in `~/.aws/credentials`.

1. Append the contents of [`credentials.ini`](https://github.com/wellcomecollection/aws-account-infrastructure/blob/main/accounts/credentials.ini) to your `~/.aws/credentials` file.

   This contains a list of [named profiles](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html), e.g. a profile for the read-only role in the platform account:

   ```ini
   [platform-read_only]
   source_profile=default
   role_arn=arn:aws:iam::760097843905:role/platform-read_only
   region=eu-west-1
   ```

   The list is generated automatically by the `create_account_role_config.py` script.
2. To select a role, pass the `AWS_PROFILE` environment variable with the name of the profile.

   For example, these S3 commands will run in the platform, catalogue, and workflow accounts, respectively:

   ```console
   $ AWS_PROFILE=platform-read_only aws s3 ls

   $ AWS_PROFILE=catalogue-developer aws s3 ls

   $ AWS_PROFILE=workflow-admin aws s3 ls
   ```