awslisted

# AWS Use the installed `aws` CLI for AWS inspection, diagnosis, and explicitly authorized changes. ## Route the request - For `reset-password` or `--reset-password`, read [references/reset-password.md](references/reset-password.md) completely and use the `vd:gopass` skill. - For Secrets Manager value changes, application credential rotation, one-off ECS provisioning, or ECS Exec that may touch a secret, read [references/credential-operations.md](references/credential-operations.md) completely. - For public endpoint tracing, incidents, cleanup, or cross-service verification, read [references/daily-operations.md](references/daily-operations.md), then load the service references it selects. - For Lambda, API Gateway, Function URLs, SQS, DLQs, serverless promotion, or retirement, read [references/serverless.md](references/serverless.md). - For Route 53, ALB/ELBv2, target groups, EC2, EBS, or SSM, read [references/compute-networking.md](references/compute-networking.md). - For CloudWatch, CloudTrail, S3, log analysis, audit correlation, or object verification, read [references/observability-storage.md](references/observability-storage.md). - For other requests, follow the general workflow below and load current service-specific official documentation when command behavior is unclear or likely to have changed. ## General workflow 1. Confirm the active identity before interpreting or changing anything: ```bash aws sts get-caller-identity --output json aws configure l