Guide

neboto is a keyboard-driven terminal UI for browsing AWS. It is read-only: it issues only describe, list and get calls, so it is safe to run against production. This guide covers installing it, the first run, and the keys and concepts that do most of the work. Inside the app, ? is the authoritative key reference, and : finds and runs any command by name.

  1. Install — Prebuilt binaries for Linux and macOS, cargo-binstall, or from source.
  2. First run — Credentials, region, the welcome splash, and the command-line flags.
  3. Navigation — The keys that do most of the work: list pane, detail pane, links, sub-tabs.
  4. Search — The @prefix syntax, fuzzy matching, tag filters, @all across services, and @audit's security findings.
  5. Logs, metrics and lenses — The in-pane views: log tail and search, CloudWatch charts with change markers, the change timeline, @changes account-wide, references, network access.
  6. Browsers — Walk a bucket like a file manager, open a Terraform state and jump to its resources, scan or query a DynamoDB table.
  7. Multi-account — Profiles, assuming into Organizations member accounts, and why an assumed session cannot mutate.
  8. Scripts and agents — neboto services, ls, get and audit: the same read-only calls as the TUI, printed as a table, JSON, Markdown or CSV for scripts and AI agents.
  9. Configuration — The TOML config file, themes, cache TTLs, and where the file lives.
  10. Permissions — What IAM access neboto needs, the read-only guarantee, and the handful of calls worth a second look.
  11. What's new — What changed in each release since v0.1.0, newest first, with links to the full notes and binaries.