AWS CLI Command Builder

Build AWS CLI commands visually by selecting services, operations, and parameters. Copy ready-to-use commands instantly.

About This Tool

The AWS CLI Command Builder is a free browser-based tool that helps you construct AWS Command Line Interface commands through a visual form instead of memorizing complex syntax. Select an AWS service (S3, EC2, Lambda, IAM, DynamoDB, CloudFormation, STS, ECS), choose an operation, and fill in the required and optional parameters using form fields. The tool generates the complete aws command with proper flag ordering and quoting.

The builder covers the most commonly used AWS CLI operations: S3 file operations (cp, sync, ls, rm, mb), EC2 instance management (describe-instances, run-instances, start, stop, terminate), Lambda function operations (invoke, create-function, list-functions), IAM role and user management, DynamoDB data operations (put-item, get-item, query, scan), and CloudFormation stack management. Global options like --output, --region, --profile, and --query are supported for all commands.

If you work with Docker containers, try the Docker Run Command Builder for a similar visual experience. For converting curl commands to code, check out curl to Code. And if you need to parse AWS ARNs, the AWS ARN Parser can help break down resource identifiers.

All processing runs entirely in your browser. No AWS credentials, commands, or parameters are ever sent to any server. This tool is safe to use with production account details and sensitive resource identifiers.

How to Use

  1. Select an AWS Service from the dropdown (S3, EC2, Lambda, IAM, DynamoDB, CloudFormation, STS, or ECS).
  2. Choose an Operation from the second dropdown to see its parameters.
  3. Fill in the required parameters (marked with a red asterisk) and any optional parameters you need.
  4. Optionally set Global Options like output format, region, profile, or JMESPath query.
  5. Review the Generated Command in the output panel below the form. The command is formatted with line continuations for readability.
  6. Read the Command Explanation section to understand what each flag does.
  7. Click Copy or press Ctrl+Shift+C to copy the command to your clipboard. The copied version is a single line ready to paste into your terminal.

Popular AWS CLI Examples

View all AWS CLI examples →

FAQ

Which AWS services are supported?

The builder currently supports S3 (cp, sync, ls, rm, mb), EC2 (describe-instances, run-instances, start, stop, terminate), Lambda (invoke, create-function, list-functions, delete-function), IAM (create-role, create-user, attach-role-policy, list-roles), DynamoDB (put-item, get-item, query, scan), CloudFormation (create-stack, update-stack, delete-stack, describe-stacks), STS (get-caller-identity, assume-role), and ECS (list-services, update-service, run-task). More services and operations will be added over time.

Do I need AWS credentials to use this tool?

No. This tool only generates command strings — it does not execute them or connect to AWS. You will need the AWS CLI installed and configured with valid credentials on your machine to run the generated commands.

How do I handle JSON parameters like DynamoDB items?

For JSON-valued parameters (like DynamoDB item JSON or IAM trust policies), type or paste the JSON directly into the input field. The tool will include it in the generated command. For complex JSON, you can also use the file:// prefix to reference a local file, e.g., file://item.json.

What is the --query flag for?

The --query flag uses JMESPath, a query language for JSON, to filter and transform the command output. For example, --query 'Reservations[].Instances[].[InstanceId,State.Name]' extracts just instance IDs and states from the describe-instances output. The JMESPath query field in the Global Options section adds this flag to your command.

Can I use named profiles?

Yes. Enter a profile name in the Profile field under Global Options. This adds --profile your-profile-name to the command, which tells the AWS CLI to use credentials from that named profile in your ~/.aws/credentials file instead of the default profile.

Is my data safe?

Yes. All command generation runs entirely in your browser using JavaScript. No data — including AWS account IDs, resource names, ARNs, or any parameters — is ever sent to any server. You can verify this by checking the Network tab in your browser's developer tools while using the tool.

Why is the copied command on one line?

The display shows the command with line continuation characters (\) for readability, but the copied version is a single line that you can paste directly into any terminal. This avoids issues with different shells handling line continuations differently.

Related Tools