AWS SAA – Lecture 18: AWS Access Keys, CLI and SDK

Published on
Written by Henry Nguyen

Phase Verbs / Action Phrases

PhraseMeaning
access (AWS)connect to and use AWS services
generate (access keys)create credentials via the Management Console
download (credentials)save access keys to your computer
embed (the SDK)include the library inside your application code
automate (tasks)write scripts that run without manual steps
interact with (services)communicate with AWS APIs from a tool or application

Technical Vocabulary

TermDefinition
Management ConsoleAWS’s web-based GUI; protected by username + password (+ MFA)
CLI (Command Line Interface)Terminal-based tool for running AWS commands; protected by access keys
SDK (Software Development Kit)Language-specific libraries for calling AWS APIs from within application code
Access Key IDPublic portion of AWS credentials — like a username; used to identify who is calling
Secret Access KeyPrivate portion of AWS credentials — like a password; must never be shared
Access KeysThe pair of Access Key ID + Secret Access Key used by CLI and SDK
Public APIAWS services expose APIs publicly; CLI and SDK call these APIs
BotoAWS SDK for Python; the AWS CLI itself is built on Boto
IoT SDKSDK for embedded/connected devices (thermal sensors, backlogs, etc.)

Key Concepts

Three Ways to Access AWS

MethodInterfaceProtected by
Management ConsoleWeb browser UIUsername + password + MFA
AWS CLITerminal / shellAccess Keys
AWS SDKApp code (libraries)Access Keys

Access Keys

  • Generated in the Management Console
  • Each IAM user creates their own access keys
  • Access Key ID = public (like a username)
  • Secret Access Key = private (like a password — never share)
  • Never share access keys with others — they can create their own

AWS CLI

  • Allows issuing commands like aws s3 cp ... from the terminal
  • Direct access to AWS public APIs
  • Used to write automation scripts
  • Open-source on GitHub

AWS SDK

  • Language-specific libraries (JavaScript, Python, PHP, .NET, Ruby, Java, Go, Node.js, C++)
  • Also: Mobile SDKs (Android, iOS) and IoT SDKs
  • Embedded inside application code — not a terminal tool
  • The AWS CLI is built on the Python SDK (Boto)

Exam Tips

  • CLI and SDK both use access keys (not password)
  • Access Key ID ≠ password; Secret Access Key = the sensitive part
  • Don’t confuse CLI (terminal tool) with SDK (library in your code)
  • The CLI is built on the Python Boto SDK — this is a common trivia fact