Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.
Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows

PS D:\kaau> where.exe aws
C:\Program Files\Amazon\AWSCLIV2\aws.exe
PS D:\kaau> aws --version
aws-cli/2.24.1 Python/3.12.6 Windows/2022Server exe/AMD64

PS D:\kaau> aws sts get-caller-identity
{
    "UserId": "AROAVPGLDJ7BQOLODLPSY:i-0bad85a3034e6fcac",
    "Account": "376235577283",
    "Arn": "arn:aws:sts::376235577283:assumed-role/PhotonInstance/i-0bad85a3034e6fcac"
}

#
# login to AWS CLI:
#
PS D:\kaau> $Env:AWS_ACCESS_KEY_ID="ASIAXSFKZAVHTMQZTP3L"
PS D:\kaau> $Env:AWS_SECRET_ACCESS_KEY="QdLkIABQCocgV5Go8e6wRbnUwdyvHmHSI7HO3Gha"
PS D:\kaau> $Env:AWS_SESSION_TOKEN="IQoJb3JpZ2luX2VjELj//////////.....xRDXAjbarAF/zF6cBMY5fs2M/i/DukkOjSvvQG/lwul3tDpCw=="
PS D:\kaau> $Env:AWS_REGION="us-east-1"

PS D:\kaau> aws sts get-caller-identity
{
    "UserId": "AROAXSFKZAVHX2RYV444K:KianMing.Aau@bmo.com",
    "Account": "520049198415",
    "Arn": "arn:aws:sts::520049198415:assumed-role/AWSReservedSSO_AWS-TREO-SRE-COEI-Obsv_164781e205d583c0/KianMing.Aau@bmo.com"
}

PS D:\kaau> aws kms list-keys
[[red:An error occurred (AccessDeniedException) when calling the ListKeys operation: User: arn:aws:sts::520049198415:assumed-role/]]
[[red:AWSReservedSSO_AWS-TREO-SRE-COEI-Obsv_164781e205d583c0/KianMing.Aau@bmo.com is not authorized to perform: kms:ListKeys on]] 
[[red:resource: * with an explicit deny in an identity-based policy: arn:aws:iam::520049198415:policy/BMOManagedIPNetworkRestriction]]

#
# refers: https://bmo.atlassian.net/wiki/spaces/T2GAPP/pages/1099594031/BeyondTrust+Netskope+Proxy+Info
#
PS D:\kaau> $env:HTTP_PROXY="http://nsawsqsse.bmogc.net:8080"
PS D:\kaau> $env:HTTPS_PROXY="http://nsawsqsse.bmogc.net:8080"

PS D:\kaau> aws kms list-keys
[[red:SSL validation failed for https://kms.us-east-1.amazonaws.com/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:]] 
[[red:self-signed certificate in certificate chain (_ssl.c:1000)]]

PS D:\kaau> aws s3 ls
[[red:SSL validation failed for https://kms.us-east-1.amazonaws.com/ [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed:]] 
[[red:self-signed certificate in certificate chain (_ssl.c:1000)]]

PS D:\kaau> dir
    Directory: D:\kaau
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
d-----          7/6/2026  11:24 AM                .aws
d-----          7/6/2026  11:24 AM                .osquery
d-r---          7/6/2026  11:24 AM                3D Objects
d-----          7/6/2026  11:24 AM                AppData
d----l         7/18/2026   7:31 PM                Contacts
d----l         7/18/2026   7:31 PM                Desktop
d----l         7/18/2026   7:31 PM                Documents
d----l         7/18/2026   7:31 PM                Downloads
d-r---          7/6/2026  11:24 AM                Favorites
d----l         7/18/2026   7:31 PM                Links
d----l         7/18/2026   7:31 PM                Music
d----l         7/18/2026   7:31 PM                My Files
d----l         7/18/2026   7:31 PM                Pictures
d----l         7/18/2026   7:31 PM                Saved Games
d----l         7/18/2026   7:31 PM                Searches
d----l         7/18/2026   7:31 PM                Videos

PS D:\kaau> cd "My Files"
PS D:\kaau\My Files> dir
    Directory: D:\kaau\My Files
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
d----l         7/18/2026   7:31 PM                Home Folder
d-----         7/18/2026   7:31 PM                Temporary Files

PS D:\kaau\My Files> cd "Home Folder"
PS D:\kaau\My Files\Home Folder> dir
    Directory: D:\kaau\My Files\Home Folder
Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-a----         7/18/2026   8:31 PM         132392 nscacert_combined.pem

PS D:\kaau\My Files\Home Folder> $Env:AWS_CA_BUNDLE="D:\kaau\My Files\Home Folder\nscacert_combined.pem"
PS D:\kaau\My Files\Home Folder> aws s3 ls s3://epre-sre-coei-cac-s3-bucket
[[red:An error occurred (AccessDenied) when calling the ListObjectsV2 operation: User: arn:aws:sts::520049198415:assumed-role/]]
[[red:AWSReservedSSO_AWS-TREO-SRE-COEI-Obsv_164781e205d583c0/KianMing.Aau@bmo.com is not authorized to perform: s3:ListBucket on]] 
[[red:resource: "arn:aws:s3:::epre-sre-coei-cac-s3-bucket" with an explicit deny in an identity-based policy]]

PS D:\kaau\My Files\Home Folder> exit