Skip to main content
Please ensure you’ve completed the previous steps:

​
Introduction

Fjall populates an AWS config with all your account and SSO information. Before running any commands, you’ll need to set your Fjall profile to the correct AWS profile. By default, this will be the profile created during the Deploy Organisation step and will appear as <organisation-name> in your ~/.aws/config file. Once your profile is set, any commands you run within Fjall will assume these credentials.
Sessions are cached. If they’ve expired or you’re logged out, you’ll be prompted to authenticate through your browser. Example prompt: 
SSO token expired or not found. Initiating SSO login...
Opening browser for SSO authentication...
If the browser doesn't open automatically, visit: https://d-**********.awsapps.com/start/#/device?user_code=***-***
SSO Login Prompt Figure: SSO login prompt.

​
Setting Your Active Profile

Run the following command to select a profile from your AWS config: 
fjall profile set
📝 Naming convention:
Profile names follow the pattern:
<company-name>-<account-name>-<abbreviated-region>
e.g. exampleorg-production-use1 (where use1 = us-east-1)
🧠 Note:
The sso-session refers to the Identity Center session created during the previous setup step.
Example prompt: 
fjall profile set
? Select an AWS profile: › - Use arrow-keys. Return to submit.
❯   exampleorg
    exampleorg-exampleorg-use1
    exampleorg-businesscontinuity-use1
    exampleorg-development-use1
    exampleorg-staging-use1
    exampleorg-platform-use1
  ↓ exampleorg-production-use1

​
Example AWS Config Output

# --------------------------------
# exampleorg
# --------------------------------

[profile exampleorg-exampleorg-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[profile exampleorg-businesscontinuity-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[profile exampleorg-development-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[profile exampleorg-staging-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[profile exampleorg-platform-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[profile exampleorg-production-use1]
region = us-east-1
sso_account_id = ************
sso_role_name = AdministratorAccess
sso_session = sso-exampleorg

[sso-session sso-exampleorg]
sso_region = us-east-1
sso_start_url = https://d-**********.awsapps.com/start

​
Next Steps

Now we understand profiles, let’s move to Deploying Your Platform Account! ✅