Amazon Account and Access Keys - Amazon Tools for PowerShell
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Account and Access Keys

To access Amazon, you will need to sign up for an Amazon account.

Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests that you make to Amazon. If you don't have access keys, you can create them by using the IAM console at We recommend that you use IAM access keys instead of Amazon root account access keys. IAM lets you securely control access to Amazon services and resources in your Amazon account.


To create access keys, you must have permissions to perform the required IAM actions. For more information, see Granting IAM User Permission to Manage Password Policy and Credentials in the IAM User Guide.

To get your access key ID and secret access key

  1. Open the IAM console at

  2. On the navigation menu, choose Users.

  3. Choose your IAM user name (not the check box).

  4. Open the Security credentials tab, and then choose Create access key.

  5. To see the new access key, choose Show. Your credentials resemble the following:


    • Secret access key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

  6. To download the key pair, choose Download .csv file. Store the .csv file with keys in a secure location.

  • Keep the keys confidential to protect your Amazon account, and never email them. Do not share them outside your organization, even if an inquiry appears to come from Amazon or No one who legitimately represents Amazon will ever ask you for your secret key.

  • You can retrieve the secret access key only when you initially create the key pair. Like a password, you can't retrieve it later. If you lose it, you must create a new key pair.

Related topics