AWS Mobile CLI User Credentials - AWS Mobile Hub

On October 30, 2021, AWS Amplify will replace AWS Mobile Hub. For more information, see Migrating to Amplify.

AWS Mobile CLI User Credentials


The following content applies if you are already using the AWS Mobile CLI to configure your backend. If you are building a new mobile or web app, or you’re adding cloud capabilities to your existing app, use the new AWS Amplify CLI instead. With the new Amplify CLI, you can use all of the features described in Announcing the AWS Amplify CLI toolchain, including AWS CloudFormation functionality that provides additional workflows.


The first time you set up the CLI you will be prompted to provide AWS user credentials. The credentials establish permissions for the CLI to manage AWS services on your behalf. They must belong to an AWS IAM user with administrator permissions in the account where the CLI is being used.


Administrator permissions are granted by an AWS account administrator. If don’t have administrator permissions you will need to ask an administrator for the AWS account to grant them.

If you are the account owner and signed in under the root credentials for the account, then you have, or can grant yourself, administrator permissions using the AdministratorAccess managed policy. Best practice is to create a new IAM user under your account to access AWS services instead of using root credentials.

For more information, see Control Access to Mobile Hub Projects.

Get Account User Credentials

If you have administrator permissions, the values you need to provide the CLI are your IAM user’s Access Key ID and a Secret Access Key. If not, you will need to get these from an administrator.

To provide the ID and the Key to AWS CLI, follow the CLI prompts to sign-in to AWS, and provide a user name and AWS region. The CLI will open the AWS IAM console Add user dialog, with the AdministratorAccess policy attached, and the Programmatic access option selected by default.

Get credentials for a new user

  1. Choose Next: Permissions and then choose Create user.

    Alternatively, you could add the user to a group with AdministratorAccess attached.

                     Create an AWS IAM user to validate AWS Mobile CLI permissions.
  2. Choose Create user.

  3. Copy the values from the table displayed, or choose Download .csv to save the values locally, and then type them into the prompts.

                     Create an AWS IAM user to validate AWS Mobile CLI permissions.

For more detailed steps, see add a new account user with administrator permissions.

Get credentials for an existing user

  1. Choose cancel.

  2. On the left, choose Users, then select the user from the list. Choose Security credentials, then choose Create access key.