Amazon CodeCatalyst is no longer open to new customers. Existing customers can continue to use the service as normal. For more information, see [How to migrate from CodeCatalyst](migration.md).
# Set up and sign in to CodeCatalyst
There are two types of space that you can set up in CodeCatalyst: spaces that support AWS Builder ID users, and creating a space that supports identity federation, where SSO users and groups are managed in IAM Identity Center. Users in an AWS Builder ID space sign in to CodeCatalyst with their AWS Builder ID, and users in a space set up for identity federation sign in to CodeCatalyst using the SSO portal for the company associated with the space.
**Note**
CodeCatalyst user names have a minimum length of 3 and a maximum length of 100 characters. Provided user names longer than 100 characters will be truncated. This can result in a user name that appears to be a duplicate of another 100-character user name. For more information, see [I can’t access my BID space as a new user or can’t be added as a new SSO user due to truncated user name](troubleshooting.md#troubleshoot-username-truncated).
The steps to set up and administer a AWS Builder ID space are provided in this guide. To work with a CodeCatalyst AWS Builder ID space, you will set up CodeCatalyst using the user settings and AWS Builder ID that you use to sign in to CodeCatalyst.
The steps to set up and administer a space that supports identity federation are provided in the *CodeCatalyst Administrator Guide*. To work with spaces that are set up for identity federation, see [Setup and administration for CodeCatalyst spaces](https://docs.aws.amazon.com/codecatalyst/latest/adminguide/what-is.html) in the Amazon CodeCatalyst Administrator Guide.
This section provides two common paths for setting up to work in Amazon CodeCatalyst with an AWS Builder ID space: creating a space and a project as the first user, and accepting an invitation to an existing space or project. These setup workflows are necessarily quite different. The following diagram shows both sign-up processes as follows:
1. In the first case, you create and set up a space for your company, team, or group, and create a project before inviting others to these resources. An AWS account must be provided for billing purposes, where you can still default to the Free tier.
1. In the second case, if you join CodeCatalyst by accepting an invitation to a project, someone else has already created a space and project for you. However, you'll still want to configure your profile so that you're ready to start working with others.
![\[Sign up and create a space that you can invite members to join\]](http://docs.aws.amazon.com/codecatalyst/latest/userguide/images/sign-up-types.png)
**Tip**
CodeCatalyst uses spaces to group projects and resources. When you first sign up for CodeCatalyst, you'll be prompted to create a space as well as a project.
Whether you sign up to create a space and project or you sign up as part of accepting an invitation, you create an AWS Builder ID that you will use to log in to CodeCatalyst. To create an AWS Builder ID, you provide the full name, password, and email address that you use to sign in to AWS applications. You use the email and password to sign in to CodeCatalyst after this point. You can also use this AWS Builder ID to log in to other applications that use AWS Builder ID credentials.
In CodeCatalyst and in AWS Builder ID, a *profile* is generated based on your login information. Your profile contains your CodeCatalyst preferences for language and notification settings in your CodeCatalyst projects.
**Tip**
If you encounter any problems while signing up for your Amazon CodeCatalyst profile, follow the steps provided on that page. If you need additional help, see [Problems signing up](ipa-troubleshooting.md#id-troubleshooting-sign-up).
**Topics**
+ [Creating a new space and development role (starting without an invitation)](sign-up-create-resources.md)
+ [Accepting an invitation and creating an AWS Builder ID](sign-up-sign-in.md)
+ [Signing in with an AWS Builder ID](id-how-to-sign-in.md)
+ [Signing in with SSO](sign-in-sso.md)
+ [Viewing all spaces and projects for a user](home.md)
+ [Viewing and managing CodeCatalyst profiles](view-profiles.md)
+ [Setting up to use the AWS CLI with CodeCatalyst](set-up-cli.md)
# Creating a new space and development role (starting without an invitation)
You can sign up for Amazon CodeCatalyst without an invitation to an existing space or project. When you do, you will create a space and project after creating your AWS Builder ID. As part of creating a space, you will need to add an AWS account for billing purposes.
**Tip**
If you encounter any problems while signing up for your Amazon CodeCatalyst profile, follow the steps provided on that page. If you need additional help, see [Problems signing up](ipa-troubleshooting.md#id-troubleshooting-sign-up).
Here is one possible flow for a user starting out with CodeCatalyst without an invitation to a project or a space.
Mary Major is a developer who is interested in CodeCatalyst and decides to try it out. She navigates to the CodeCatalyst console and chooses the option to sign up and create an AWS Builder ID. Mary provides an email address and password to create her AWS Builder ID. She will be able to use her AWS Builder ID to sign in to CodeCatalyst and other applications. When asked to choose an alias, she specifies `MaryMajor` as the CodeCatalyst user name that will display in CodeCatalyst and that other project members will use to @mention Mary.
Next, Mary is automatically directed to create a space. As part of this flow, Mary is asked to associate an AWS account with the space she's creating so that she can see the sample code in her first project build and deploy. She adds that information and creates her space, where she chooses the option to create a preview development role that can be used for projects in her new space. Mary chooses to create a project, and then she views a list of blueprints for projects. After reviewing the information for the available blueprints, she decides to try the **Modern three-tier web application** blueprint for her first project. She fills in the required fields and creates the project. As soon as the project is ready, she's taken to a project summary page that includes recent activity as well as links to project code and the workflow that automatically builds and deploys that code. She explores both the code and the workflow, including viewing the deployed sample web application. Liking what she sees, she decides to invite some of her co-workers to the project to start exploring CodeCatalyst.
When she has a moment, Mary configures her AWS Builder ID to sign in to CodeCatalyst with multi-factor authentication (MFA). With MFA configured, Mary can sign in to CodeCatalyst using a combination of her CodeCatalyst password and a passcode or token from an approved third-party authentication app.
## Creating a new space and IAM roles
Follow these steps to sign up for your Amazon CodeCatalyst profile, create a space, and add an account, a support role, and a developer role for your space.
The final procedure creates and add the developer role. The developer role is an AWS IAM role that enables your CodeCatalyst workflows to access AWS resources. The developer role is a service role used to manage AWS services and will be created in the account that is signed in. A service role is an [IAM role](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) that a service assumes to perform actions on your behalf. An IAM administrator can create, modify, and delete a service role from within IAM. The role will have a name `CodeCatalystWorkflowDevelopmentRole-spaceName`. For more information about the role and role policy, see [Understanding the **CodeCatalystWorkflowDevelopmentRole-*spaceName*** service role](ipa-iam-roles.md#ipa-iam-roles-service-role).
**Note**
As a security best practice, only assign administrative access to administrative users and developers who need to manage access to AWS resources in the space.
Before you begin, you must be ready to provide an AWS account ID for an account where you have administrative privileges. Have your 12-digit AWS account ID ready. For information about finding your AWS account ID, see [Your AWS account ID and its alias](https://docs.aws.amazon.com/IAM/latest/UserGuide/console_account-alias.html).
**To sign up as a new user**
1. Before you start in the CodeCatalyst console, open the AWS Management Console, and then make sure you are signed in with the same AWS account that you want to use to create your space.
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. On the welcome page, choose **Sign up**. The **Create your AWS Builder ID** page displays. Your AWS Builder ID is an identity you create to sign in. It is not the same as an AWS account.
1. In **Your email address**, enter the email address you want to associate with CodeCatalyst. Then choose **Next**.
1. In **Your name**, provide the first and last name you want displayed in applications where you use your AWS Builder ID. Spaces are allowed. This will be your AWS Builder ID profile name, such as **Mary Major**. You can change the name later.
Choose **Next**. The **Email verification** page displays.
1. A verification code will be sent to the email you specified. Enter this code in **Verification code**, and then choose **Verify**. If you don't receive your code after 5 minutes and cannot find it in your spam or junk folders, then choose **Resend code**.
1. Once we verify your code, enter a password that meets the requirements in **Password** and **Confirm password**.
Select the checkbox confirming your agreement with the AWS Customer Agreement and the AWS Service Terms, and then choose **Create AWS Builder ID**.
1. On the **Create your CodeCatalyst alias** page, enter an alias you want to use for your unique user identifier in CodeCatalyst. Choose a shortened version of your name with no spaces, such as **MaryMajor**. Other CodeCatalyst users will use this to @mention you in comments and pull requests. Your CodeCatalyst profile will contain both your full name from your AWS Builder ID and your CodeCatalyst alias. You cannot change your CodeCatalyst alias later.
Your full name and your alias will display in different areas in CodeCatalyst. For example, your profile name displays for your listed activity in the activity feed, but project members will use your alias to @mention you.
Choose **Next**. The page updates to show the **Create your CodeCatalyst space** section.
1. In **Name your space**, enter the name of your space. You cannot change this later.
**Note**
Space names must be unique across CodeCatalyst. You cannot reuse names of deleted spaces.
1. In **AWS Region** dropdown menu, choose the region where you want to store your space and project data. You cannot change this later.
1. Choose **Next**. The page updates to show the page for adding an AWS account. This account will be used as the billing account for the space.
1. In **AWS account ID**, enter the twelve-digit ID for the account you want to connect to your space.
In **AWS account verification token**, copy the generated token ID. The token is automatically copied for you, but you might want to store it while you approve the AWS connection request.
1. Choose **Go to the AWS console to verify**.
1. The **Verify Amazon CodeCatalyst space** page opens in the AWS Management Console. This is the **Amazon CodeCatalyst spaces** page. You might need to sign in to access the page.
In the AWS Management Console, make sure to choose the same AWS Region where you want to create your space.
To directly access the page, sign in to the Amazon CodeCatalyst Spaces in the AWS Management Console at https://console.aws.amazon.com/codecatalyst/home/.
The verification token field in the AWS Management Console is automatically populated with the token generated in CodeCatalyst.
1. (Optional) Under **Authorized paid tiers**, choose **Authorize paid tiers (Standard, Enterprise)** to turn on the paid tiers for your billing account.
**Note**
This does not upgrade the billing tier to a paid tier. However, this configures the AWS account so that you can change the billing tier for your space at any time in CodeCatalyst. You can turn on the paid tiers at any time. Without making this change, the space is only able to use the Free tier.
1. Choose **Verify space**.
An **Account verified** success message displays to show that the account has been added to the space.
1. Remain on the **Verify Amazon CodeCatalyst space** page. Choose the following link: **To add IAM roles for this space, view space details.**
The connections page with **CodeCatalyst space details** opens in the AWS Management Console. This is the **Amazon CodeCatalyst spaces** page. You might need to log in to access the page.
1. Return to the CodeCatalyst page, and then choose **Next**.
1. A status message displays while your space is being created. When the space is created, CodeCatalyst the following message is displayed: **Your space is ready. Your last step is creating a project.**. You can do one of the following:
+ Choose **Skip for now**.
+ Choose **Create your first project** for your space. For a tutorial that shows you how to create a project with a blueprint, see [Tutorial: Creating a project with the Modern three-tier web application blueprint](getting-started-template-project.md)
**Note**
If a permissions error or banner is shown, then refresh the page and try to view the page again.
**To create and add the CodeCatalyst **CodeCatalystWorkflowDevelopmentRole-*spaceName*****
1. Before you start in the CodeCatalyst console, open the AWS Management Console, and then make sure you are logged in with the same AWS account for your space.
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. Navigate to your CodeCatalyst space. Choose **Settings**, and then choose **AWS accounts**.
1. Choose the link for the AWS account where you want to create the role. The **AWS account details** page displays.
1. Choose **Manage roles from AWS Management Console**.
The **Add IAM role to Amazon CodeCatalyst space** page opens in the AWS Management Console. This is the **Amazon CodeCatalyst spaces** page. You might need to log in to access the page.
1. Choose **Create CodeCatalyst development administrator role in IAM**. This option creates a service role that contains the permissions policy and trust policy for the development role. The role will have a name `CodeCatalystWorkflowDevelopmentRole-spaceName`. For more information about the role and role policy, see [Understanding the **CodeCatalystWorkflowDevelopmentRole-*spaceName*** service role](ipa-iam-roles.md#ipa-iam-roles-service-role).
**Note**
This role is only recommended for use with developer accounts and uses the `AdministratorAccess` AWS managed policy, giving it full access to create new policies and resources in this AWS account.
1. Choose **Create development role**.
1. On the connections page, under **IAM roles available to CodeCatalyst**, view the `CodeCatalystWorkflowDevelopmentRole-spaceName` role in the list of IAM roles added to your account.
1. To return to your space, choose **Go to Amazon CodeCatalyst**.
**To create and add the CodeCatalyst **AWSRoleForCodeCatalystSupport****
1. Before you start in the CodeCatalyst console, open the AWS Management Console, and then make sure you are logged in with the same AWS account for your space.
1. Navigate to your CodeCatalyst space. Choose **Settings**, and then choose **AWS accounts**.
1. Choose the link for the AWS account where you want to create the role. The **AWS account details** page displays.
1. Choose **Manage roles from AWS Management Console**.
The **Add IAM role to Amazon CodeCatalyst space** page opens in the AWS Management Console. This is the **Amazon CodeCatalyst Spaces** page. You might need to sign in to access the page.
1. Under **CodeCatalyst space details**, choose **Add CodeCatalyst Support role**. This option creates a service role that contains the permissions policy and trust policy for the preview development role. The role will have a name **AWSRoleForCodeCatalystSupport** with a unique identifier appended. For more information about the role and role policy, see [Understanding the **AWSRoleForCodeCatalystSupport** service role](ipa-iam-roles.md#ipa-iam-roles-support-role).
1. On the **Add role for CodeCatalyst Support** page, leave the default selected, and then choose **Create role**.
1. Under **IAM roles available to CodeCatalyst**, view the `CodeCatalystWorkflowDevelopmentRole-spaceName` role in the list of IAM roles added to your account.
1. To return to your space, choose **Go to Amazon CodeCatalyst**.
After you create your AWS Builder ID, create your first space, and add an account, you can then create a project. For more information, see [Creating a project](projects-create.md). If this is your first time using CodeCatalyst, we suggest starting with [Tutorial: Creating a project with the Modern three-tier web application blueprint](getting-started-template-project.md).
# Accepting an invitation and creating an AWS Builder ID
You can sign up for Amazon CodeCatalyst as part of accepting an invitation to a project or a space. As part of accepting the invitation, you'll be prompted to create an AWS Builder ID. You'll use your AWS Builder ID to access resources in CodeCatalyst.
**Tip**
If you need additional help, see [Problems signing up](ipa-troubleshooting.md#id-troubleshooting-sign-up).
Here is one possible flow for a user starting out with CodeCatalyst with an invitation to a project or a space.
Saanvi Sarkar is a developer who has received an invitation to join a CodeCatalyst project as a project administrator. Saanvi accepts the invitation, which opens the sign-in page for CodeCatalyst. She chooses to sign up and provides an email address and password to create her AWS Builder ID. Saanvi will be able to use her AWS Builder ID to sign in to CodeCatalyst and other applications. Later, she can edit her profile to change her login email address or password. When asked to choose an alias, Saanvi specifies `SaanviSarkar` as the CodeCatalyst alias that will display in CodeCatalyst and that other project members will use to @mention Saanvi. After she has signed up, Saanvi will also be able to use her sign-in credentials for other applications that use AWS Builder ID credentials.
Upon completing sign up, Saanvi automatically joins the CodeCatalyst project and space specified in the invitation. The invitation also provides predetermined permissions for her roles in the project and space. In the project settings, Saanvi's alias shows in the members list with her assigned project role. To work with source repositories in CodeCatalyst, Saanvi takes a moment to create a personal access token (PAT). The PAT will be used in CodeCatalyst for authentication when making source changes or actions that need an authentication token.
When Saanvi works on a project, her alias will be listed in the work activity log for the project. Issues and comments by Saanvi will show her alias, where other project members are able to @mention her in replies. To @mention another project member, Saanvi looks up their alias on their CodeCatalyst profile.
When she has a moment, Saanvi configures her AWS Builder ID to sign in to CodeCatalyst with multi-factor authentication (MFA). With MFA configured, Saanvi can sign in to CodeCatalyst using a combination of her CodeCatalyst password and a passcode or token from an approved third-party authentication app.
## Accepting an invitation and creating an AWS Builder ID
When you're invited to a project or space in Amazon CodeCatalyst, you'll receive an email from notify@codecatalyst.aws asking you to accept the invitation. If you already have a AWS Builder ID and are signed in to CodeCatalyst, choosing **Accept invitation** will automatically open the project or space in a browser tab. If you're not signed in to the console but have a AWS Builder ID, you'll be taken to the sign-in page. For more information, see [Signing in with an AWS Builder ID](id-how-to-sign-in.md).
If you don't have a AWS Builder ID, choosing **Accept invitation** will take you to the sign-in page, where you should choose the option to create your AWS Builder ID.
**Important**
By accepting an invite and opening repositories in Dev Environments, scripts may execute with access to your CodeCatalyst credentials. Please ensure you trust the source before proceeding.
**To accept an invitation and create a AWS Builder ID**
1. In the invitation email, choose **Accept invitation**.
1. On the sign in page, choose **Not signed up? Create your AWS Builder ID**.
**Tip**
Your AWS Builder ID is an identity you create to sign in. It is not the same as an AWS account.
1. On the **Create your AWS Builder ID** page, in **Email address**, enter the email address you want to use for your AWS Builder ID.
In **Your name**, provide the first and last name you want displayed in applications where you use your AWS Builder ID. Spaces are allowed. This will be your AWS Builder ID profile name, such as **Mary Major**. You can change the name later.
Choose **Next**.
A verification code will be sent to the email you specified. Enter this code in **Verification code**, and then choose **Verify**. If you don't receive your code after 5 minutes and cannot find it in your spam or junk folders, then choose **Resend code**.
1. Once your code is verified, enter a password that meets the requirements in **Password** and **Confirm password**.
1. Choose **Create AWS Builder ID**.
1. On the **Create your alias** page, enter an alias you want to use for your unique user identifier in CodeCatalyst. Choose a shortened version of your name with no spaces, such as **MaryMajor**. Other CodeCatalyst users will use this to @mention you in comments and pull requests. Your CodeCatalyst profile will contain both your full name from your AWS Builder ID and your CodeCatalyst alias. You cannot change your CodeCatalyst alias.
Your full name and your alias will display in different areas in CodeCatalyst. For example, your profile name displays for your listed activity in the activity feed, but project members will use your alias to @mention you.
Choose **Create alias**. You'll be taken to the project or space you were invited to.
# Signing in with an AWS Builder ID
Follow these steps to sign in to your Amazon CodeCatalyst profile.
**Note**
Have you registered a device for multi-factor authentication (MFA) yet? We strongly recommend that you configure MFA in Amazon CodeCatalyst to increase your security. For more information, see [How to register a device for use with multi-factor authentication](mfa.md#id-how-to-register).
**To sign in with your AWS Builder ID**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. Enter your **Email address**. Optionally, choose **Save my email address** if you want to save your email address for future sign-ins. Choose **Continue**.
1. Enter your **Password**. Choose **Sign in**. If you don't remember your password, follow the steps in [I forgot my password](troubleshooting.md#id-forgot-password).
## Trusted devices
After you choose the option **This is a trusted device** from the sign-in page, Amazon CodeCatalyst considers all future sign-ins from that device as authorized. Amazon CodeCatalyst will not present an option to enter an MFA code as long as you use that trusted device. Some exceptions include signing in from a new browser or when your device has been issued an unknown IP address.
# Signing in with SSO
Follow these steps to use SSO to sign in to Amazon CodeCatalyst.
To sign in with your AWS Builder ID instead, see [Signing in with an AWS Builder ID](id-how-to-sign-in.md).
**To sign in with SSO**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. Under **Choose a sign-in option**, choose **Use Single Sign-On (SSO)**.
1. In **AWS Identity Center application name**, enter the application name provided by your identity federation administrator.
1. Choose **Continue to IAM Identity Center**.
# Viewing all spaces and projects for a user
You can view a listing of your spaces and projects on the user home page. The user home page shows a listing of each space to which the user belongs, the role for the user in that space, such as **Space administrator**, and the projects in each space where the user has membership.
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. In the browser, enter the following address: [https://codecatalyst.aws/home](https://codecatalyst.aws/home)
![\[The user home page lists all spaces and projects where you are a member\]](http://docs.aws.amazon.com/codecatalyst/latest/userguide/images/user_home.png)
1. Choose the space or project you want to open. If you do not see a space or project you expected to see, your might need to sign in as a different user.
# Viewing and managing CodeCatalyst profiles
You can view user profiles in Amazon CodeCatalyst to get information such as email addresses and CodeCatalyst aliases. You can also update your profile and your AWS Builder ID. If you forget your password, you can request a password reset.
## Viewing your CodeCatalyst profile
You provide information at signup that will be used as your credentials to log in to Amazon CodeCatalyst and that will be managed in your profile. This includes your **Name**, **Nickname**, and the **Email address** you use to sign in to CodeCatalyst.
**Note**
The AWS Builder ID **Nickname** is not your CodeCatalyst alias. You selected your CodeCatalyst alias at signup.
**To view your CodeCatalyst profile**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. At the top right, choose the arrow next to the icon with your first initial, and then choose **My settings**. The CodeCatalyst **My settings** page opens.
1. To update your AWS Builder ID email address or password, or to set up MFA, choose **Manage AWS Builder ID**. The AWS Builder ID page opens.
## Viewing another user's CodeCatalyst profile
**To view another user's CodeCatalyst profile**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. On the side navigation, choose **Project settings**. Choose the **Members** tab. View the list of members for your CodeCatalyst project.
1. Choose the member name that you want to look up or @mention. The **My settings** page shows the user's alias, email address, and full name. Use the CodeCatalyst alias to @mention project members.
**Note**
A user's AWS Builder ID **Nickname** is not their CodeCatalyst alias. They selected their CodeCatalyst alias at signup.
To view another user's profile in your project, choose their name in the list.
# Updating a profile
In CodeCatalyst, your profile consists of personal information managed by **AWS Builder ID** and settings managed in CodeCatalyst.
+ Your profile's full name, email address, and password are managed by **AWS Builder ID**. You entered this information when you signed up. When you set up MFA to use an authenticator app for application sign-in, CodeCatalyst takes you to the **AWS Builder ID** page.
+ CodeCatalyst settings for your personal access token (PAT), CodeCatalyst notifications, and language preferences are managed in the **My settings** page in CodeCatalyst. For more information, see [Grant users repository access with personal access tokens](ipa-tokens-keys.md).
**Note**
You can update your AWS Builder ID full name (CodeCatalyst display name) and first name. However, you cannot change your CodeCatalyst alias.
## Updating an AWS Builder ID or email address
**To update your AWS Builder ID or email address**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. At the top right, choose the arrow next to the icon with your first initial, and then choose **My settings**. The CodeCatalyst **My settings** page opens.
1. On the profile page, choose **Manage AWS Builder ID**. The **AWS Builder ID** page opens.
1. On the left side of the page, choose **My details**.
1. Under **Profile information**, choose **Edit** to update your **Name** or **Nickname**. If you did not specify a nickname, the **Nickname** field reflects the first name in the full name. It is not your CodeCatalyst alias.
**Note**
This updates the AWS Builder ID full name and first name. This does not update your CodeCatalyst alias.
Under **Contact information**, choose **Edit** to update your **Email address**.
**Note**
This updates the email address you will use to sign in to CodeCatalyst.
# Changing a CodeCatalyst password associated with an AWS Builder ID
Use the following instructions to change the Amazon CodeCatalyst password associated with your AWS Builder ID.
**Note**
If you are using SSO to sign in to CodeCatalyst, contact your administrator about changing your password.
**To change your CodeCatalyst password**
1. Open the CodeCatalyst console at [https://codecatalyst.aws/](https://codecatalyst.aws/).
1. At the top right, choose the arrow next to the icon with your first initial, and then choose **User profile**. The CodeCatalyst **My settings** page opens.
1. On the profile page, choose **Manage AWS Builder ID**. The AWS Builder ID page opens.
1. On the left side of the page, choose **Security**.
1. Choose **Change password** and follow the instructions.
# Setting up to use the AWS CLI with CodeCatalyst
The Amazon CodeCatalyst console is where you'll work on most of your daily tasks. However, you might want to set up and configure the AWS CLI when you're working with Dev Environments, personal access tokens, or logs of events in CodeCatalyst. You must install the AWS CLI and configure a profile before you can use it with CodeCatalyst.
# To set up the AWS CLI for CodeCatalyst
1. Install the latest version of the AWS CLI. If you already have a version of the AWS CLI installed, make sure that it is recent and includes commands for CodeCatalyst, and update it if needed. To verify that you have a version installed that includes CodeCatalyst commands, open a command prompt and run the following command:
```
aws codecatalyst help
```
If you see a list of CodeCatalyst commands, you have a version that supports CodeCatalyst. If the command is not recognized, update your version of the AWS CLI to the latest version. For more information, see [Installing or updating the latest version of the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) in the AWS Command Line Interface User Guide.
1. Run the **aws configure** command to create a profile if you don't have one or if you want to use a named profile specifically for CodeCatalyst. We recommend creating a named profile to use specifically with CodeCatalyst, but you can also use the default profile. For more information, see [Configuration basics](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-quickstart.html).
1. Edit the `config` file for the profile to add a section for connecting to CodeCatalyst as follows. The `config` file is located at `~/.aws/config` on Linux or macOS, or at `C:\Users\USERNAME\.aws\config` on Windows.
```
[profile codecatalyst]
region = us-west-2
sso_session = codecatalyst
[sso-session codecatalyst]
sso_region = us-east-1
sso_start_url = https://view.awsapps.com/start
sso_registration_scopes = codecatalyst:read_write
```
1. Save the file.
1. Before attempting to run any CodeCatalyst commands, open a new terminal or command prompt and run the following command to request and retrieve credentials to run `aws codecatalyst` commands. Replace `codecatalyst` with the name of your profile if needed.
```
aws sso login --profile codecatalyst
```
To view examples of **codecatalyst** commands, see the following topics:
+ [Grant users repository access with personal access tokens](ipa-tokens-keys.md)
+ [Accessing logged events using event logging](ipa-logs.md)