---
schema_version: 1
route: /t/aws-cli.md
tool: "aws-cli"
---

# sincecutoff.com /t/aws-cli — AWS CLI

- name: AWS CLI
- kind: cli
- children: none
- homepage: <https://github.com/aws/aws-cli>

Changes to the tools coding agents drive, since a model's training cutoff, each linked to its first-party source. Check installed versions and limitations before acting; a cutoff date does not establish what a model knows.
Original editorial content: [Apache 2.0](https://sincecutoff.com/v1/data-license.txt), by [0xPatrick](https://0xpatrick.dev). Preserve applicable license and [NOTICE](https://sincecutoff.com/notice.txt) attribution when redistributing. Third-party source text and examples retain their own rights. [License scope and attribution](https://sincecutoff.com/v1/license.json).
To stay current, read the changes feed: [`/v1/changes.md?tool=aws-cli`](https://sincecutoff.com/v1/changes.md?tool=aws-cli) (or `.json`), adding `since=YYYY-MM-DD` for your training cutoff. Entries for registered children are included; the registry itself is `/v1/tools.json`. How to page and save your place: [llms.txt](https://sincecutoff.com/llms.txt).

### aws-cli adds lambda-web deploy (2026-10-12)
- slug: aws-cli-adds-lambda-web-deploy-a4a4fd403472
- announced: 2026-10-01
- score: 0.93

How to use it:

When deploying a local HTTP application, run `aws lambda-web deploy` with its function name and source directory; add `--create` to skip the creation prompt. The command creates or updates the Web Function and returns its endpoint URL.

Examples:

```
aws lambda-web deploy --name <function-name> --code <source-directory> --create
```

- why_it_matters: Deploy a local HTTP application as an AWS Lambda Web Function from a coding repository.
- sources: <https://github.com/aws/aws-cli/blob/2.37.13/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/lambda-web/deploy.html>, <https://github.com/aws/aws-cli/blob/2.37.8/CHANGELOG.rst>
- gotchas: "Version: 2.37.13"; "--name (required): Web Function name; 2–64 characters, letters, numbers, hyphens, or underscores; cannot start or end with a hyphen or underscore."; "--code (required): Path to the source directory; required when creating a function unless using `--hello-world`."; "--create: Confirms creation without a prompt; required for creation in non-interactive environments."; "Prerequisite: AWS CLI must be installed and configured."

### aws dynamodb ExportTableToPointInTime supports export filters and projections (2026-09-30)
- slug: aws-dynamodb-exporttabletopointintime-supports-export-filters-and-projections-7add1e0c7d24
- score: 0.93

How to use it:

When exporting selected DynamoDB data, pass the expressions inside `--filter-specification`; the key condition must match one partition key value, and any filter used with it must reference non-key attributes.

Examples:

```
aws dynamodb export-table-to-point-in-time --table-arn <table-arn> --s3-bucket <bucket> --filter-specification '{"KeyConditionExpression":"#pk = :pk","FilterExpression":"#status = :status","ProjectionExpression":"#pk, #status, #attribute","ExpressionAttributeNames":{"#pk":"<partition-key-name>","#status":"<status-attribute>","#attribute":"<projected-attribute>"},"ExpressionAttributeValues":{":pk":{"S":"<partition-key-value>"},":status":{"S":"<status-value>"}}}'
```

- why_it_matters: Export point-in-time table data with selected records or attributes.
- sources: <https://github.com/aws/aws-cli/blob/2.37.7/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/dynamodb/export-table-to-point-in-time.html>, <https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/S3DataExport_Requesting.html>
- gotchas: "Version: 2.37.7"; "--filter-specification: Object containing export filter criteria. Its expression subkeys can be combined in one request."; "FilterExpression: Filters exported items; when KeyConditionExpression is omitted, may reference key attributes too."; "ProjectionExpression: Names the attributes included in output; separate names with commas."; "KeyConditionExpression: Filters by key; requires equality on one partition key and may compare a sort key. When supplied, FilterExpression can reference only non-key attributes."; "ExpressionAttributeNames: Map of substitution tokens to attribute names used by expressions."; "ExpressionAttributeValues: Map of substitution tokens to DynamoDB attribute values used by expressions."; "--table-arn (required): ARN of the table to export."; "--s3-bucket (required): Destination S3 bucket name."; "Prerequisite: Enable point-in-time recovery (PITR) on the table; export time must be within its configured PITR recovery period."; "Prerequisite: IAM permissions must allow `dynamodb:ExportTableToPointInTime`, `s3:AbortMultipartUpload`, `s3:PutObject`, and `s3:PutObjectAcl`. The caller must be in the same AWS account as the source table."; "Docs conflict: The accessible AWS CLI reference is for version 2.37.10, newer than the card’s 2.37.7. Its current export command documents these expressions under --filter-specification; version 2.37.7 documentation could not be opened to verify the exact syntax for that version."

### aws login supports --redirect-port (2026-09-24)
- slug: aws-login-supports-redirect-port-905f49f1cef3
- score: 0.93

How to use it:

When fixing the Authorization Code callback port, run `aws login --redirect-port <port>` to use that localhost port for the callback server.

Examples:

```
aws login --redirect-port <port>
```

- why_it_matters: When fixing the callback port for an Authorization Code login, select a fixed port for the callback server.
- sources: <https://github.com/aws/aws-cli/blob/2.37.2/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/login/>
- gotchas: "Version: 2.37.2"; "--redirect-port <value>: Integer localhost port for the Authorization Code callback server. If omitted, a random available port is selected; the option is ignored when the login flow does not use a callback server."; "Prerequisite: The release note introduces this option in AWS CLI 2.37.2."

### aws agent-toolkit update-skill --all updates outdated installed AWS skills (2026-09-22)
- slug: aws-agent-toolkit-update-skill-all-updates-outdated-installed-aws-skills-10a46bf7913b
- score: 0.94

How to use it:

When installed AWS skills are out of date, run `aws agent-toolkit update-skill --all` to update them across all detected agents.

Examples:

```
aws agent-toolkit update-skill --all
```

- why_it_matters: Update all installed AWS skills that are out of date in one command.
- sources: <https://github.com/aws/aws-cli/blob/2.37.0/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/agent-toolkit/update-skill.html>, <https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html>, <https://docs.aws.amazon.com/agent-toolkit/latest/userguide/security-iam-cli.html>
- gotchas: "Version: 2.37.0"; "--all: Updates every installed AWS skill that is out of date. Cannot be combined with `--skill-name`."; "--skill-name: Names one skill to update; cannot be combined with `--all`."; "Prerequisite: AWS CLI version 2.35.0 or later."; "Prerequisite: One or more supported AI coding agents installed; the CLI detects agents from their configuration directories."; "Prerequisite: No IAM permissions or identity configuration are required for skill updates."; "Updates installed AWS skills that are out of date."

### aws configure agent-toolkit adds --yes (2026-06-19)
- slug: aws-configure-agent-toolkit-adds-yes-f71d08220417
- score: 0.92

How to use it:

When setting up the Agent Toolkit and accepting its defaults, run `aws configure agent-toolkit --yes` to skip prompts, select all detected agents, install default skills, and configure the AWS MCP server.

Examples:

```
aws configure agent-toolkit --yes
```

- why_it_matters: When configuring the agent toolkit and accepting its defaults, run the setup without interactive prompts.
- before: Run `aws configure agent-toolkit` and respond to the interactive prompts to choose agents, install default skills, and configure the AWS MCP server.
- sources: <https://github.com/aws/aws-cli/blob/2.35.9/CHANGELOG.rst>, <https://github.com/aws/aws-cli/blob/2.35.9/awscli/customizations/agenttoolkit/configure.py>, <https://docs.aws.amazon.com/agent-toolkit/latest/userguide/security-iam-cli.html>
- gotchas: "Version: 2.35.9"; "--yes: Skip interactive prompts; select all detected agents, install default skills, and configure the AWS MCP server."; "Prerequisite: Install at least one supported AI coding agent; the command errors if it detects none."; "Prerequisite: No IAM permissions are required for the CLI toolkit commands; they fetch skills from a public, read-only catalog over HTTPS."; "The defaults select all detected agents, install default skills, and configure the AWS MCP server."

### aws s3 copy operations add all option to --copy-props (2026-06-16)
- slug: aws-s3-copy-operations-add-all-option-to-copy-props-1f8f2d44fe7c
- score: 0.96

How to use it:

For S3-to-S3 copies with `cp`, `mv`, or `sync`, set `--copy-props all` to copy annotations, tags, and the metadata properties covered by `default`.

Examples:

```
aws s3 cp s3://<source-bucket>/<source-key> s3://<destination-bucket>/<destination-key> --copy-props all
```

```
aws s3 mv s3://<source-bucket>/<source-key> s3://<destination-bucket>/<destination-key> --copy-props all
```

```
aws s3 sync s3://<source-bucket>/<source-prefix>/ s3://<destination-bucket>/<destination-prefix>/ --copy-props all
```

- why_it_matters: When copying S3 objects with the AWS CLI, preserve their annotations, metadata, and tags.
- sources: <https://github.com/aws/aws-cli/blob/2.35.6/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/s3/cp.html>, <https://docs.aws.amazon.com/cli/latest/reference/s3/mv.html>, <https://docs.aws.amazon.com/cli/latest/reference/s3/sync.html>
- gotchas: "Version: 2.35.6"; "--copy-props all: `--copy-props` applies only to S3-to-S3 copies. `all` copies annotations plus tags and properties covered by `default` (content type, content language, content encoding, content disposition, cache control, expires, and metadata). Set it for the requested preservation."; "--metadata-directive: If set, disables `--copy-props`; do not set it when relying on `--copy-props all`."; "Prerequisite: AWS CLI must be installed and configured to use the documented examples."; "Prerequisite: For multipart copies, `all` may make additional `HeadObject`, `GetObjectTagging`, `PutObjectTagging`, `ListObjectAnnotations`, `GetObjectAnnotation`, and `PutObjectAnnotation` API calls."; "The `all` option applies to S3 to S3 copy operations."

### aws configure agent-toolkit configures agent tools with AWS skills and MCP server (2026-06-09)
- slug: aws-configure-agent-toolkit-configures-agent-tools-with-aws-skills-and-mcp-serve-8ce6bb5ee4a7
- score: 0.91

How to use it:

When configuring an installed supported AI coding agent with AWS skills and the AWS MCP Server, run `aws configure agent-toolkit` and complete its interactive setup. Restart the agent client after setup to load the configuration.

Examples:

```
aws configure agent-toolkit
```

- why_it_matters: Configure an agentic tool to use AWS skills and an MCP server.
- sources: <https://github.com/aws/aws-cli/blob/2.35.0/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/configure/agent-toolkit.html>, <https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html>, <https://docs.aws.amazon.com/agent-toolkit/latest/userguide/security-iam-cli.html>
- gotchas: "Version: 2.35.0"; "--yes: Skip prompts; select all detected agents, install default skills, and configure the AWS MCP Server."; "Prerequisite: AWS CLI version 2.35.0 or later and one or more supported AI coding agents installed; the CLI detects agents by their configuration directories."; "Prerequisite: No IAM permissions or identity configuration are required for this command. Restart the agent client after setup to load its configuration."

### aws s3 mb adds a --tags flag for bucket creation (2026-03-12)
- slug: aws-s3-mb-adds-a-tags-flag-for-bucket-creation-24ba8efb3c29
- score: 0.94

How to use it:

When creating an S3 bucket with tags, run `aws s3 mb` with the bucket S3 URI and repeat `--tags <key> <value>` for each tag.

Examples:

```
aws s3 mb s3://<bucket-name> --tags <key-1> <value-1> --tags <key-2> <value-2>
```

- why_it_matters: Create an S3 bucket with tags using the AWS CLI.
- sources: <https://github.com/aws/aws-cli/blob/2.34.8/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/reference/s3/mb.html>
- gotchas: "Version: 2.34.8"; "<S3Uri> (required): S3 bucket URI to create."; "--tags <key> <value>: Tag key and value to add to the bucket; use the flag multiple times, once per tag."; "Prerequisite: AWS CLI must be installed and configured."

### aws-cli --output off suppresses stdout (2026-02-27)
- slug: aws-cli-output-off-suppresses-stdout-69c54802d581
- score: 0.96

How to use it:

When a repository workflow must suppress AWS CLI stdout while keeping errors visible, add `--output off` to the command. Error messages remain on stderr.

Examples:

```
aws s3api list-buckets --output off
```

```
aws s3api head-bucket --bucket <bucket> --output off 2>/dev/null
```

- why_it_matters: Run an AWS CLI command in a repository workflow where stdout must be suppressed while errors and warnings remain visible.
- sources: <https://github.com/aws/aws-cli/blob/2.34.0/CHANGELOG.rst>, <https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-output-format.html>
- gotchas: "Version: 2.34.0"; "--output off: Selects the `off` output format, which suppresses command output to stdout; errors are still written to stderr."

### aws s3 cp, mv, and sync add --no-overwrite (2026-01-14)
- slug: aws-s3-cp-mv-and-sync-add-no-overwrite-c4bd20897cba
- score: 0.98

How to use it:

When copying, moving, or syncing S3 files or objects, add `--no-overwrite` to transfer only items absent from the destination.

Examples:

```
aws s3 cp --no-overwrite <source> <destination>
```

```
aws s3 mv --no-overwrite <source> <destination>
```

```
aws s3 sync --no-overwrite <source> <destination>
```

- why_it_matters: Copy, move, or sync S3 objects without overwriting objects already at the destination.
- sources: <https://github.com/aws/aws-cli/blob/2.33.0/CHANGELOG.rst>, <https://docs.aws.amazon.com/en_en/cli/latest/userguide/cli-services-s3-commands.html>
- gotchas: "Version: 2.33.0"; "<source> (required): Source path or S3 URI."; "<destination> (required): Target path or S3 URI."; "--no-overwrite: Boolean option; transfers only files or objects not present at the destination."; "Prerequisite: AWS CLI 2.33.0 adds this option to `s3 cp`, `s3 mv`, and `s3 sync`."