Configuring AWS CLI for macOS

Configuring AWS CLI for macOS

💡
Note:
This step is only required if you are using a SASE-based deployment. If you are using the Lumia installers, no additional steps are needed to configure AWS CLI for macOS.
The AWS CLI tools are used to communicate with Bedrock and to set up connections for using models like Claude. To ensure these tools work seamlessly with TLS inspection, you must point the AWS CLI to an SSL bundle containing your SASE certificate.

Implementation Steps

1. Locate your SASE Root Certificate

To proceed, you will need the full path to your SASE root certificate file (e.g., /Users/yourname/Downloads/cert.pem).
follow our Locating your SASE Root Certificate guide to obtain the file before proceeding to the next step.

2. Set the AWS CA Bundle Environment Variable

AWS CLI requires an additional environment variable to be set to point to an SSL bundle containing your SASE certificate.
💡
Contact us if you need assistance creating this bundle.
Run the following command in your Terminal to point AWS CLI to your SSL bundle:
launchctl setenv AWS_CA_BUNDLE "/Path/to/CA_Bundle_with_SASE_Cert.pem"

3. Verification

To validate the configuration:
  1. Restart your Terminal.
  2. Run an AWS CLI command (e.g., aws bedrock list-foundation-models).
  3. Confirm Connectivity: Verify that the command executes successfully without SSL/TLS certificate errors.
  4. Return to our Getting Started guide to view setup links for other applications, or proceed to Step 1.B to complete your integration.
❓
Need assistance? If you have questions or require help with your specific configuration, please reach out to your Lumia representative.