必须删除环境变量，以便aws cli在没有--file标志的情况下工作

Question

好吧，我对这种行为感到困惑。基本上，当我在环境变量中设置AWS creds related时，每次使用CLI时，AWS CLI都会强制我传递--profile标志。

因此，基本上当AWS\u ACCESS\u KEY\u ID和AWS\u SECRET\u ACCESS\u KEY时，即使我的配置文件是[default]，我也不能运行像AWS s3 ls这样的命令而不向它传递--profile标志

另外，请注意环境变量值和my/中的值。aws/凭证文件完全相同。此外，我还尝试将AWS_PROFILE和AWS_DEFAULT_PROFILE设置为默认值，希望如果在环境变量中设置了keys、secret和PROFILE等所有值，那么我不必显式传递任何--PROFILE标志。在这一点上，不必显式地传递此标志对我来说非常重要，因为如果我正在运行一个与aws连接并获取默认凭据的应用程序，则没有简单的方法将配置文件信息传递给该应用程序。

我的凭据文件如下所示：

[default]
aws_access_key_id = AKIA****
aws_secret_access_key = VpR***

我的配置文件如下所示：

[default]
region = us-west-1
output = json

我的环境变量对于相应的条目具有相同的值。至少用于密钥、机密和配置文件。

有没有办法解决这个问题？

Answer 1

AWS CLI按特定顺序使用一系列提供程序查找凭据。（https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#config-settings-and-precedence）

明确地：

Command line options – You can specify --region, --output, and --profile as parameters on the command line.

Environment variables – You can store values in the environment variables: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_SESSION_TOKEN. If they are present, they are used.

CLI credentials file – This is one of the files that is updated when you run the command aws configure. The file is located at ~/.aws/credentials on Linux or macOS, or at C:\Users\USERNAME\.aws\credentials on Windows. This file can contain the credential details for the default profile and any named profiles.

CLI configuration file – This is another file that is updated when you run the command aws configure. The file is located at ~/.aws/config on Linux or macOS, or at C:\Users\USERNAME\.aws\config on Windows. This file contains the configuration settings for the default profile and any named profiles.

Container credentials – You can associate an IAM role with each of your Amazon Elastic Container Service (Amazon ECS) task definitions. Temporary credentials for that role are then available to that task's containers. For more information, see IAM Roles for Tasks in the Amazon Elastic Container Service Developer Guide.

Instance profile credentials – You can associate an IAM role with each of your Amazon Elastic Compute Cloud (Amazon EC2) instances. Temporary credentials for that role are then available to code running in the instance. The credentials are delivered through the Amazon EC2 metadata service. For more information, see IAM Roles for Amazon EC2 in the Amazon EC2 User Guide for Linux Instances and Using Instance Profiles in the IAM User Guide.

另一个可能的选项是取消设置env中的任何冲突变量，并依靠aws凭据文件从默认条目中提供适当的访问凭据。