Skip to content

Account Commands

Identify the account you are pointed at and what it can reach. Use these before any destructive operation to confirm you are in the right account, and to check credential validity when a command fails with an authorization error.

account info resolves the account ID, alias, and caller identity. account validate checks credentials and reports which permissions are usable, which matters because most other commands degrade gracefully rather than failing outright when permissions are missing.

Commands

account contact-info

Get AWS account contact information.

aws-cloud-utilities account contact-info

account detect-control-tower

Detect AWS Control Tower or Landing Zone deployments.

aws-cloud-utilities account detect-control-tower [OPTIONS]
Option Value Description
--verbose flag Enable verbose output showing region-by-region progress

account info

Get AWS account information.

aws-cloud-utilities account info

account limits

Get AWS service limits and usage.

aws-cloud-utilities account limits

account regions

List all available AWS regions.

aws-cloud-utilities account regions

account service-regions

List available regions for a specific AWS service.

aws-cloud-utilities account service-regions [OPTIONS]
Option Value Description
--service TEXT AWS service to check regions for (default: ec2)

account validate

Validate AWS credentials and permissions.

aws-cloud-utilities account validate

Examples

# Confirm which account and identity the CLI is using
aws-cloud-utilities account info

# Verify credentials and see which permissions resolve
aws-cloud-utilities account validate

# Check credentials for a named profile
aws-cloud-utilities --profile production account validate

# Account contact details on file with AWS
aws-cloud-utilities account contact-info

# Every region, and the ones a given service supports
aws-cloud-utilities account regions
aws-cloud-utilities account service-regions --service lambda

# Service quotas and current usage
aws-cloud-utilities account limits

# Detect Control Tower / Landing Zone, with per-region progress
aws-cloud-utilities account detect-control-tower --verbose

Notes

detect-control-tower scans every region and is slow on large accounts. Pass --verbose to see region-by-region progress rather than waiting on a silent prompt.