AWS-CREDENTIALS

Generated by scripts/gen-format-pages.py from docs/data/format-metadata/, FILE_FORMATS.csv and docs/formats-master.csv. Do not edit by hand: change the source, then run the script.

AWS Credentials Preview.

At a glance


Purpose	An AWS credentials or config file: INI profiles with access keys, region, roles and SSO settings.
Extensions	`.aws-credentials`
Poka parser	`poka-aws-credentials`
Viewer	`poka-tree-viewer`
Depth tier	Parser with a shared viewer (see Depth tiers)
Breadth tier	B2 Broad (see Breadth tiers)

How much Poka reads

B2 Broad. The common content of the current and the common older versions is decoded. Some named features or versions are not, and are listed.

Confidence: medium (the reviewer read the code). Basis: Reviewed 2026-10-26: read parsers/poka-aws-credentials/src/main.rs (450 lines) and plugin.json. No unit tests or tests/samples.rs; the corpus has no .aws-credentials sample. Covers .aws-credentials. The tree lists every profile with its settings (region, output, role ARN, source profile, MFA serial, SSO fields); access key IDs are masked and secrets, session tokens and credential processes are shown only as set, with their length. Judgement: B2: every profile and setting is shown; secrets are hidden by design.

What Poka does not read

Secret keys, session tokens and credential processes are never shown (by design)
Access key IDs are masked to a prefix and the last four characters
Keys other than the recognised set are not shown (judgement from the code)

Libraries

Libraries Poka uses or has assessed for this format, with the status, licence and language the registry records.

aws-config (profile module) (candidate; Apache-2.0; Rust; https://docs.rs/aws-config/latest/aws_config/profile/index.html) — Parses AWS profile files; page mentions config and credentials files, credentials-file handling not explicitly confirmed; Rust, so suitable in principle for wasm32 with care

Sources

parsers/poka-aws-credentials/src/main.rs
parsers/poka-aws-credentials/plugin.json