Does aws login work with CDK?

[khaitranhq]

Nowadays, AWS CLI can be authenticated with browser sessions via aws login. However, looks like the authenticated profile with this method can't be used for AWS. I tried cdk diff --profile personal_account but it showed Need to perform AWS calls for account 123456890, but no credentials have been configured

[ashrafee-dev]

try this - AWS_PROFILE=personal_account cdk diff --profile personal_account

[tamish-max]

If you're using the new browser-based aws login, CDK still needs credentials that resolve through the normal AWS SDK chain.

In practice, I’d verify the profile with the CLI first, then run CDK in the same profile/session:

aws sts get-caller-identity --profile personal_account
AWS_PROFILE=personal_account cdk diff

A couple of things worth checking if aws login succeeded but CDK still says “no credentials configured”:

• your AWS CLI is v2
• the profile name you logged into is the same one CDK is using
• ~/.aws/config is using a reusable profile that the SDK understands
• if you use Docker asset bundling, the credential problem can actually be inside the bundling step

If this is an IAM Identity Center / SSO profile, this flow is usually the most reliable:

aws sso login --profile personal_account
AWS_PROFILE=personal_account cdk diff

So yes, CDK can work with browser-based auth, but I’d still treat aws sts get-caller-identity as the quick sanity check before blaming CDK itself.