# AWS CLI config (~/.aws/config)
# infra aws login discovers accounts at runtime. Do not put real account IDs here.
# Placeholder SSO URL is the AWS documentation shape only.
# region comes from infra config aws.region (setup) or infra config set aws.region=...

[default]
output = json
{% if aws_default_region | default('') | length > 0 %}
region = {{ aws_default_region }}
{% endif %}

# Example SSO session — replace the start URL after `infra aws landing-zones add`.
# [sso-session example]
# sso_start_url = https://d-xxxx.awsapps.com/start
# sso_region = us-east-1
# sso_registration_scopes = sso:account:access
