NAME = 'list'

DESCRIPTION = (

'Lists the profile, access key, secret key, and region configuration '

'information used for the specified profile. For each configuration '

'item, it shows the value, where the configuration value '

'was retrieved, and the configuration variable name.\n'

'\n'

'For example, '

'if you provide the AWS region in an environment variable, this '

'command shows you the name of the region you\'ve configured, '

'that this value came from an environment '

'variable, and the name of the environment '

'variable.\n'

'\n'

'For temporary credential methods such as roles and IAM Identity '

'Center, this command displays the temporarily cached access key and '

'secret access key is displayed.\n'

)

SYNOPSIS = 'aws configure list [--profile profile-name]'

EXAMPLES = (

'To show your current configuration values::\n'

'\n'

' $ aws configure list\n'

' Name Value Type Location\n'

' ---- ----- ---- --------\n'

' profile <not set> None None\n'

' access_key ****************ABCD config_file ~/.aws/config\n'

' secret_key ****************ABCD config_file ~/.aws/config\n'

' region us-west-2 env AWS_DEFAULT_REGION\n'

'\n'

)

def __init__(self, session, stream=None):

super(ConfigureListCommand, self).__init__(session)

if stream is None:

stream = sys.stdout

self._stream = stream

def _run_main(self, args, parsed_globals):

self._display_config_value(ConfigValue('Value', 'Type', 'Location'),

'Name')

self._display_config_value(ConfigValue('-----', '----', '--------'),

'----')

if parsed_globals and parsed_globals.profile is not None:

profile = ConfigValue(self._session.profile, 'manual', '--profile')

else:

profile = self._lookup_config('profile')

self._display_config_value(profile, 'profile')

access_key, secret_key = self._lookup_credentials()

self._display_config_value(access_key, 'access_key')

self._display_config_value(secret_key, 'secret_key')

region = self._lookup_config('region')

self._display_config_value(region, 'region')

return 0

def _display_config_value(self, config_value, config_name):

self._stream.write('%10s %24s %16s %s\n' % (

config_name, config_value.value, config_value.config_type,

config_value.config_variable))

def _lookup_credentials(self):

# First try it with _lookup_config. It's possible

# that we don't find credentials this way (for example,

# if we're using an IAM role).

access_key = self._lookup_config('access_key')

if access_key.value is not NOT_SET:

secret_key = self._lookup_config('secret_key')

access_key.mask_value()

secret_key.mask_value()

return access_key, secret_key

else:

# Otherwise we can try to use get_credentials().

# This includes a few more lookup locations

# (IAM roles, some of the legacy configs, etc.)

credentials = self._session.get_credentials()

if credentials is None:

no_config = ConfigValue(NOT_SET, None, None)

return no_config, no_config

else:

# For the ConfigValue, we don't track down the

# config_variable because that info is not

# visible from botocore.credentials. I think

# the credentials.method is sufficient to show

# where the credentials are coming from.

access_key = ConfigValue(credentials.access_key,

credentials.method, '')

secret_key = ConfigValue(credentials.secret_key,

credentials.method, '')

access_key.mask_value()

secret_key.mask_value()

return access_key, secret_key

def _lookup_config(self, name):

# First try to look up the variable in the env.

value = self._session.get_config_variable(name, methods=('env',))

if value is not None:

return ConfigValue(value, 'env', self._session.session_var_map[name][1])

# Then try to look up the variable in the config file.

value = self._session.get_config_variable(name, methods=('config',))

if value is not None:

return ConfigValue(value, 'config-file',

self._session.get_config_variable('config_file'))

else: