AWS Credentials Provider Chain

AWS CLI Credentials Provider chain

The AWS CLI will look in this following order

  1. Command line options: --region , --output and --profile
  2. Environment variables: AWS_ACCESS_KEY_ID, ...
  3. CLI credentails file: ~/.aws/credentials
  4. CLI configureation file: ~/.aws/config
  5. Container credentials (for ECS task)
  6. Instance profile credentials (for EC2)

AWS SDK Default Provider chain

Wil look for credentials in the following order

  1. Java system properties: aws.accessKeyId and aws.secretKey
  2. Environment variables: AWS_ACCESS_KEY_ID
  3. Default credential profiles file: ~/.aws/credentials
  4. Amazon ECS container credentials (for ECS)
  5. Instance profile credentials (EC2)