This assumes you have already configured the aws command line tool. If not, check out my article on Getting Started with the AWS CLI.

Let's say you have a user that has not been granted permission to do something, such as using the aws s3api list-buckets command to return the list of S3 Buckets that have been created. Perhaps Access Denied is returned.

Check out my articles:

• Assume Role or Switch Role using the AWS CLI
• Assume Role or Switch Role using Terraform
• Python (Scripting) - Get Security Token (STS) using boto3
• Python (Scripting) - Assume Role or Switch Role using boto3
• Resolve "no identity-based policy allows the action"
• The user attempting to access the Bucket does not have a Permission Policy or Trust Policy that allows access to the Bucket - check out my article Permission Policy vs Trust Policy

~]$ aws s3api list-buckets --profile johndoe
An error occurred (AccessDenied) when calling the ListBuckets operation: Access Denied