从本地运行 AWS CLI，无需在本地存储凭证

Question

How to run aws cli to download s3 bucket data without storing aws credential in local machine?

Please Note that s3 bucket is not a public bucket.

Answer 1

Not sure what your goal is, but you can use environment variables which you are only exporting for the current session/aws_cli run.

To prevent in bash (asuming you are using linux) that the export is written to history, you can use a space infront of the command.

Answer 2

You can start an EC2 instance and give that instance a role that allows it to read from your S3 bucket. Once started, connect to the EC2 instance using ssh and initiate your S3 transfer using aws s3 cp...ˋ or ˋaws s3 sync...