DMN · Tool

aws

3 techniquesLinux · Windows · macOSDÆMONGPL-3.0

Identify the active AWS principal

DÆMON

DiscoveryLinuxWindowsmacOS

Returns the account ID, ARN and user ID for the credentials selected by this profile.

aws sts get-caller-identity --profile 'lab'

Evidence: Documentation checked · reviewed 2026-10-04
Environment: AWS
Compatibility: Examples use POSIX shell quoting. Consult installed tool help for version-specific options.
Expected result: Returns the account ID, ARN and user ID for the credentials selected by this profile.
Troubleshooting: ExpiredToken or InvalidClientTokenId means the selected credentials need refreshing. Check the profile before interpreting identity results.
Side effects: No intentional configuration changes. Remote reads may generate audit events.
Template: Configure this command in the catalog
Native: Configuration and verification
Requires: Authenticated CLI session
Refs: docs.aws.amazon.com/cli/latest/reference/sts/get-caller-identity.html

DÆMON

DiscoveryLinuxWindowsmacOS

Shows resolved configuration and where each value comes from; credentials are masked.

aws configure list --profile 'lab'

Evidence: Documentation checked · reviewed 2026-10-04
Environment: AWS
Compatibility: Examples use POSIX shell quoting. Consult installed tool help for version-specific options.
Expected result: Shows resolved configuration and where each value comes from; credentials are masked.
Troubleshooting: Environment variables can override profile configuration. Check the source column.
Side effects: No intentional configuration changes. Remote reads may generate audit events.
Template: Configure this command in the catalog
Native: Configuration and verification
Requires: Authenticated CLI session
Refs: docs.aws.amazon.com/cli/latest/reference/configure/list.html

DÆMON

DiscoveryLinuxWindowsmacOS

Returns enabled region names and endpoints.

aws ec2 describe-regions --profile 'lab' --region 'eu-west-2'

Evidence: Documentation checked · reviewed 2026-10-04
Environment: AWS
Compatibility: Examples use POSIX shell quoting. Consult installed tool help for version-specific options.
Expected result: Returns enabled region names and endpoints.
Troubleshooting: Requires ec2:DescribeRegions. A denied request is not evidence that no regions exist.
Side effects: No intentional configuration changes. Remote reads may generate audit events.
Template: Configure this command in the catalog
Native: Configuration and verification
Requires: Authenticated CLI session
Refs: docs.aws.amazon.com/cli/latest/reference/ec2/describe-regions.html