How do I use duplo-jit to access AWS S3 resources?

Context When you need to access AWS resources like S3 buckets programmatically using AWS CLI, you'll need to set up proper authentication. DuploCloud provides Just-In-Time (JIT) access through the duplo-jit tool, which allows secure, temporary access to AWS resources. Answer To use duplo-jit for accessing AWS resources: First, generate an API token: Navigate to Administrator → Users → Your User → Tokens Tab Follow the steps to create and save your token Create or edit your AWS config file at ~/.aws/config and add the following profile configuration: [profile your-env-name] region=us-west-2 credential_process=duplo-jit aws --admin --host https://your-duplo-host --token your-token Replace: your-env-name with your environment name (e.g., "rialto-prod") your-duplo-host with your DuploCloud host URL your-token with the API token generated in step 1 Use the AWS CLI with your profile by setting the AWS_PROFILE environment variable: AWS_PROFILE=your-env-name aws s3 cp s3://bucket-name/path ./local-folder/ --exclude "" --include ".pdf" For more detailed information about JIT access, refer to the DuploCloud JIT Access documentation .