Fetch-url-file-3a-2f-2f-2froot-2f.aws-2fconfig ^new^ File

Alex had just learned about the importance of securely storing AWS credentials and had read about the default credential chain that AWS SDKs use. Part of this chain involves checking for a config file (or credentials file) in the .aws directory of the user's home directory.

: Ensure that the web application process does not run with "root" privileges. If the process is isolated, it shouldn't have the permissions required to read the /root/ directory. fetch-url-file-3A-2F-2F-2Froot-2F.aws-2Fconfig

This is the fallback setting. If you run a command like aws s3 ls without specifying a profile, the CLI looks here. This is great for your personal sandbox or development environment. Alex had just learned about the importance of

# Lists buckets in the default region aws s3 ls If the process is isolated, it shouldn't have

Next time you type aws , take a moment to appreciate the configuration file making that command possible.