Must move this page to make it public, once it is complete.

This document shows how to setup and use the awscli-login tool to retrieve temporary AWS access keys using your Cornell netid credentials and Duo (i.e., Cornell Two-Step Login). Using temporary access keys associated with an AWS role is much more safe than using fixed AWS access keys tied to an IAM user.