IAM Migration to orbit-use

We are happy to announce an important change in how you access AWS accounts and CAIP resources: the legacy AWS CLI and BMWAWS CLI login functionality have been deprecated. From now on, all authentication and access management will be handled via the new orbit-use CLI, provided by our Orbit colleagues.

What’s Changing?

• AWS CLI and BMWAWS CLI login are deprecated.
• Use the orbit-use CLI for all future logins to AWS accounts and CAIP clusters.

How to Login

To access CAIP, you must assume the CAIP developer role for your teamspace.

Role:

<orbit-space>-<orbit-teamspace>-caip-developer

Use the following command:

orbit-use cloud <orbit-space> <dev|prod> <orbit-teamspace> --role caip-developer

Examples:

orbit-use cloud smartdaip dev genai-tsara --role caip-developer

orbit-use cloud ai-rsrch dev aira --role caip-developer

To open the Orbit web interface after login, add the --ui option:

orbit-use cloud <orbit-space> <dev|prod> <orbit-teamspace> --role caip-developer --ui

Examples:

orbit-use cloud smartdaip dev genai-tsara --role caip-developer --ui

orbit-use cloud ai-rsrch dev aira --role caip-developer --ui

If only one role is available in the teamspace, you can omit --role and orbit-use will auto-detect it:

orbit-use cloud <orbit-space> <dev|prod> <orbit-teamspace>

Why This Matters

The new CLI streamlines authentication, improves security, and integrates seamlessly with cloud CLI tools. Profiles are automatically configured for you, making it easier to manage credentials and access.

More Information

For full details and step-by-step instructions, see our updated IAM documentation.

If you have any questions or need support, please refer to our support documentation.

Thank you for adapting to this change and helping us keep our platform secure and efficient!