{
  "name": "aws/credentials",
  "version": 1,
  "title": "AWS — SDK credentials",
  "keys": {
    "AWS_ACCESS_KEY_ID": {
      "required": true,
      "sensitivity": "secret",
      "obtain": "https://console.aws.amazon.com/iam/home#/security_credentials",
      "description": "Half of an AWS credential pair. Not a thing to bake into a browser bundle, whatever its name suggests. No shape is declared: AWS shows AKIA and ASIA in examples but states no contract."
    },
    "AWS_SECRET_ACCESS_KEY": {
      "required": true,
      "sensitivity": "secret",
      "obtain": "https://console.aws.amazon.com/iam/home#/security_credentials",
      "description": "The credential. AWS allows two keys per user so one can be retired while the other works."
    },
    "AWS_SESSION_TOKEN": {
      "required": false,
      "sensitivity": "secret",
      "obtain": "https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",
      "description": "Required with temporary credentials, absent with a long-term key. AWS recommends the temporary ones."
    },
    "AWS_REGION": {
      "required": false,
      "sensitivity": "config",
      "obtain": "https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-envvars.html",
      "description": "The SDK reads this; the CLI also reads AWS_DEFAULT_REGION."
    }
  }
}