# Generate Local Credentials from AWS

## Overview

Aquarium works with local credential files for both AWS and GCP! If your data is stored in a location outside of one of these two providers please contact Aquarium for a recommendation!

## Steps to Generate a Local Credentials File

### Navigate to IAM Dashboard

You can access it by searching "IAM" in the AWS console top bar to get to the Identity and Access Management page.

<figure><img src="/files/B0i6seAvsPrFgDmhyIK3" alt=""><figcaption></figcaption></figure>

### Navigate to the Users Tab

<figure><img src="/files/d7DTN7ImgFCZ5TkHE60c" alt=""><figcaption></figcaption></figure>

To access the `User` tab, you will need proper permissions. Otherwise, you can create a new user with the appropriate access policy (`AmazonS3ReadOnlyAccess` should be sufficient)

### Navigate to Security Credentials Tab

Click on a user, then click on the security credentials tab. You'll see a place where you can create an access key for that user:

<figure><img src="/files/K0h46BXrfLQlBLSSprcu" alt=""><figcaption></figcaption></figure>

Alternatively, if you already use AWS utilities on the commandline and have your local `awscli` configured, they can just point aquarium at that file, and it'll read from there when needed:

```
# Should be here
~/.aws/credentials
```

As a step towards doing that, you'll had to have created a personal access key (you as a root user tied to your email login, not a virtual IAM user).There's a dropdown in the very top-right which has an option called "Security credentials." Clicking on that will get you to a very similar page, where you can create access keys for your root user:image.png&#x20;

<figure><img src="/files/cA7delT76JqFxWdZg8rn" alt=""><figcaption></figcaption></figure>

[<br>](https://files.slack.com/files-pri/TTH494W85-F04H8R7NTGV/image.png)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://legacy-docs.aquariumlearning.com/aquarium/data-privacy/data-sharing-methodologies/generate-local-credentials-from-aws.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.