---
keyword: [Extend, Third Party Technology, AWS]
nav: wcp_docs
parent_url: /wcp_docs/
title: Obtain Short-Term Credential for AWS Command Line Interface
layout: subsection
---

### Prerequisites

-   Provision the Workday-provided AWS and user accounts on the Workday Developer Site.
-   [Download and install the AWS command line interface (CLI).](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html#getting-started-install-instructions)


### Context

You can obtain a short-term credential on the Workday Developer Site to access the AWS CLI.

### Steps

1.  From the Console on the Workday Developer Site, click the <b>Third-Party Integrations</b> tab on the left navigation bar.
2.  Click <b>Generate AWS CLI Token</b>.

    A window opens with the AWS CLI token configuration for these AWS variables:

    -   `aws_access_key_id`
    -   `aws_secret_access_key`
    -   `aws_session_token`

    <b>Note:</b> The token expires after 1 hour. After expiration, you must generate a new token.

3.  [Input the AWS variables into the associated AWS CLI variable](https://docs.aws.amazon.com/cli/latest/userguide/cli-authentication-short-term.html).


### Example

For examples of how to use the `credentials` file as well as sample values, please refer to the [AWS CLI User Guide](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html).

### Next Steps

To immediately terminate AWS CLI access for a specific user, remove the user's access to AWS, and then and disable and delete their user account on the Workday Developer Site. This will ensure that the user can't refresh their AWS CLI token, and removes their access to the Developer Site.