Generate access keys for Lightsail API and AWS CLI - Amazon Lightsail
Step 1: Create a new access keyStep 2: Configure the AWS CLINext steps

Generate access keys for Lightsail API and AWS CLI

To use the Lightsail API or the AWS Command Line Interface (AWS CLI), you need to create a new access key. The access key consists of an Access Key ID and a Secret Access Key. Use the following procedures to create the key and configure the AWS CLI to make calls to the Lightsail API.

Step 1: Create a new access key

You can create a new access key in the AWS Identity and Access Management (IAM) console.

  1. Sign in to the the IAM console.

  2. Choose the name of the user for which you want to create an access key. The user you choose should have full access or specific access to Lightsail actions.

  3. Choose the Security credentials tabs.

  4. Choose Create access key under the Access keys section of the page.

    Note

    You can have a maximum of two access keys (active or inactive) at a time per user. If you already have two access keys, then you must delete one of them before creating a new one. Make sure that an access key is not actively in use before deleting it.

  5. Make note of the Access key ID and Secret access key listed. Choose Show under the Secret access key column to see your Secret access key.

    You can copy them from this screen or choose Download Key File to download a .csv file containing the access key ID and secret access key.

    Important

    Keep your access keys in a safe place. You should name the file something like MyLightsailKeys.csv so that you don't struggle to find them later. If you've downloaded the CSV file from the IAM console, you should delete it after you've completed step 2. You can create a new access keys later if you need to.

Step 2: Configure the AWS CLI

If you haven't installed the AWS CLI, you can do that now. See Installing the AWS Command Line Interface. After you install the AWS CLI, you need to configure it so you can use it.

  1. Open a terminal window or command prompt.

  2. Type aws configure.

  3. Paste your AWS Access Key ID from the .csv file you created in the previous step.

  4. Paste your AWS Secret Access Key when prompted.

  5. Enter the AWS Region where your resources are located. For example, if your resources are primarily in Ohio, choose us-east-2 when prompted for the Default region name.

    For more information about using the AWS CLI --region option, see General Options in the AWS CLI Reference.

  6. Choose a Default output format, such as json.

Next steps