Files
llm-tools/tools/aws-cli.llm.md
T

7.4 KiB

AWS Access Guide

This document covers the AWS environment available to AI agents working in Jacob Mathison's stack.


Account

Field Value
Account ID 567637986724
IAM User jacob_mathison
IAM Groups Administrator-Access (full access)
Default Region us-east-1

Verify identity:

aws sts get-caller-identity

Profiles (~/.aws/config)

Two profiles are configured on local machines:

Profile Key ID Notes
default AKIAYIKO4JWSNZDZEMPK Primary — use for most operations
mp-mac-tabitha AKIAYIKO4JWSKH3W2JMY Tabitha machine-specific profile

Using a named profile:

aws s3 ls --profile mp-mac-tabitha

Active Amplify Apps

These are the live frontend deployments on AWS Amplify:

App Name App ID Live URL
aarete-doczyai-app (Gitea-hosted, not yet on Amplify) Local dev only
mp-banner-and-pyre-web d1k6pj7qv29ic0 d1k6pj7qv29ic0.amplifyapp.com
mp-midnights-eclipse d166cwzk8nxlqn d166cwzk8nxlqn.amplifyapp.com
mp-sora-compiler dy0ryvla2yz9f dy0ryvla2yz9f.amplifyapp.com
mp-silma-webapp d390fbhya3a6oy d390fbhya3a6oy.amplifyapp.com
ams-enterprises d3grlr6dp3vfy4 d3grlr6dp3vfy4.amplifyapp.com
catholic-knights-hub d2jhrecnjwpdbj d2jhrecnjwpdbj.amplifyapp.com
insight-technologies-web-app d3qk956gxa1uoo d3qk956gxa1uoo.amplifyapp.com
silma-usdw d1x1hodshtm3dr d1x1hodshtm3dr.amplifyapp.com
Mathison Projects Inc do1739t99tnux do1739t99tnux.amplifyapp.com
hunter-website-frontend d2b2fe8ej44qml d2b2fe8ej44qml.amplifyapp.com
eloi-web-app d1kgq6f5c0qics / d2rtpwrs0up8wz Two deployments
db-death-to-you d7gah601krim0 d7gah601krim0.amplifyapp.com
platamus-ai-web d1kk3q6o3gwhmv d1kk3q6o3gwhmv.amplifyapp.com
mp-true-auto-test d3omnsbg4y5qym d3omnsbg4y5qym.amplifyapp.com
# List all apps
aws amplify list-apps --query 'apps[].{name:name,appId:appId}' --output table

# Get branches for a specific app
aws amplify list-branches --app-id d1k6pj7qv29ic0

# Trigger a deployment
aws amplify start-job --app-id <appId> --branch-name main --job-type RELEASE

S3 Buckets (Notable / Active)

There are 100+ buckets in this account. Here are the meaningful ones grouped by project:

Mathison Projects / MPRNDC Platform

mathisonprojectsinc-media-storage     General media storage
mathisonprojectsinc.com               Website bucket
mpfilesrepositorybucket               File repository
mp-codecommit-backup                  CodeCommit backups

Amplify Deployment Buckets (auto-managed)

Pattern: amplify-<appname>-<branch>-deployment These are managed by Amplify — do not modify directly.

Active Project Buckets

mp-silma-webapp-storage-7eb39ce6163613-main   Silma webapp storage
ams-enterprises-blog-media67aeb-main          AMS Enterprises blog media
amplify-amsenterprises-main-67aeb-deployment  AMS deployment bucket
catholicknightshubbcce21...                   Catholic Knights Hub
mpmidnightseclipse9c9853...                   Midnights Eclipse
budget-app-frontend-demo-*                    Budget app (demo iterations)
yield-curve-frontend-567637986724-us-east-1   Yield curve app
mp-star-wars-crawl-ttrpg-bucket              Star Wars TTRPG crawl
channelwatcherstack-imagebucket*              Channel watcher CDK stack
jobtrackerfrontendstack-sitebucket*           Job tracker CDK stack

Older / Archive

carbon-canyon                  Old project
carbon-canyon-images           Old project assets
hunter-website-bucket          Hunter's site (older)
# List all buckets
aws s3 ls

# List contents of a bucket
aws s3 ls s3://mp-silma-webapp-storage-7eb39ce6163613-main/

# Copy a file up
aws s3 cp ./file.txt s3://bucket-name/path/file.txt

# Sync a directory
aws s3 sync ./dist s3://bucket-name/ --delete

CloudFront Distributions

Domain Distribution ID Origin
d7my3848sxi7h.cloudfront.net E2LURYI96JEZUF nodoor S3
d3iqqrk40rv7wp.cloudfront.net E1ZMK2VOWD8N7D thelatestbyte S3
d33k0vx8ugjsbl.cloudfront.net E3FJ0C9KZ2P66V agodsfate (dev) S3
dmbj78hmp5pqz.cloudfront.net E3PZUTQE470RWU agodsfate (cursedwish) S3
d7rq6agluf3t1.cloudfront.net E19MH6OHBRAJMS budget app (demo) S3
dyg0pi8t1yiry.cloudfront.net E168A4ZM76UTOD budget app (dev) S3
di0znvwek65ph.cloudfront.net E2DJQ22UPEMH76 yield curve S3
d2r090auwn8r8q.cloudfront.net E2LQD2SHZJ9X12 Midnights Eclipse S3
d39zkcuwj614ch.cloudfront.net E3E7BJ3V0GRSPL Catholic Knights Hub S3
d3nyy5vutr3d2o.cloudfront.net E16EKCKZGH1AWI Star Wars TTRPG S3
d1nbxkp08f37uh.cloudfront.net E3TAZ95XVMILZN Lambda URL origin
d3kkup0oojcdt1.cloudfront.net E2UTIV86EU1KTG Hunter webdev apex redirect
d20fik8n5hnz6v.cloudfront.net EXXQI20BUIETJ EC2 origin
# List distributions
aws cloudfront list-distributions --query 'DistributionList.Items[].{id:Id,domain:DomainName}' --output table

# Invalidate cache (force fresh deploy)
aws cloudfront create-invalidation --distribution-id E3FJ0C9KZ2P66V --paths "/*"

Lambda Functions (us-east-1, selected)

Function Name Runtime Notes
CatholicKnightsHubTransactionLambda-main nodejs22.x Catholic Knights Hub transactions
NBS-Email-Lambda nodejs14.x Email sending (old)
Nodoor-RouterLambdaEntry-3GPR2Oa1SisY nodejs18.x Nodoor routing
amplify-login-* nodejs20.x Amplify auth challenge handlers
# List all Lambda functions
aws lambda list-functions --region us-east-1 --query 'Functions[].FunctionName' --output text

# Invoke a function
aws lambda invoke --function-name <name> --payload '{}' output.json

# Update function code (from zip)
aws lambda update-function-code --function-name <name> --zip-file fileb://function.zip

Useful AWS CLI Patterns

# Check what you have access to
aws sts get-caller-identity

# Find a bucket by partial name
aws s3 ls | grep <keyword>

# Get current Amplify deployments
aws amplify list-apps --output table

# Check a specific Amplify build
aws amplify list-jobs --app-id <appId> --branch-name main --max-results 5

# List DynamoDB tables
aws dynamodb list-tables --region us-east-1

# List Cognito user pools
aws cognito-idp list-user-pools --max-results 20 --region us-east-1

# List API Gateways
aws apigateway get-rest-apis --region us-east-1

# Check CloudFormation stacks
aws cloudformation list-stacks --stack-status-filter CREATE_COMPLETE UPDATE_COMPLETE --query 'StackSummaries[].StackName' --output text

Notes for AI Agents

  • AdministratorAccess is in effect — you can do anything in this account. Be careful with destructive operations. Always prefer non-destructive reads first.
  • Prefer --dry-run on EC2 operations and --dryrun on S3 sync when in doubt.
  • Amplify is the standard deploy path for frontend projects — use aws amplify start-job rather than manually pushing to S3.
  • Don't delete S3 buckets — they often back CloudFront distributions and Amplify deployments.
  • Region is us-east-1 unless otherwise specified. A few resources may exist in other regions.