# AWS CLI Configuration (~/.aws/config)
# Documentation: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html

# --- Identity Center (AWS Access Portal) Session ---
# A session allows you to log in once and access multiple profiles.
[sso-session main-session]
sso_start_url = https://YOUR_PORTAL_PREFIX.awsapps.com/start
sso_region = us-east-1
sso_registration_scopes = sso:account:access

# --- SSO Profiles ---

# Default profile (e.g. for development)
[profile default]
sso_session = main-session
sso_account_id = 123456789012
sso_role_name = DeveloperAccess
region = us-east-1
output = json

# Administrator profile
[profile admin]
sso_session = main-session
sso_account_id = 123456789012
sso_role_name = AdministratorAccess
region = us-east-1
output = json

# Read-only profile for a different account
[profile prod-read-only]
sso_session = main-session
sso_account_id = 210987654321
sso_role_name = ReadOnlyAccess
region = us-east-1
output = json

# --- Common Settings ---
[default]
region = us-east-1
output = json
