Guide / First run

First run

Credentials and region

neboto uses the standard AWS credential chain: environment variables, ~/.aws/credentials, ~/.aws/config (SSO profiles, IAM roles), then an instance or task role. If the aws CLI works in your shell, neboto works.

The startup region comes from AWS_DEFAULT_REGION or the active profile. R switches region at runtime without a restart; P switches profile.

The account needs read permissions for the services you browse. The quickest correct answer is the AWS-managed ReadOnlyAccess policy; see Permissions for the narrower, auditable grant.

The welcome splash

With no arguments and no default_service configured, neboto shows a welcome splash and loads nothing until you pick a service, so startup is instant. Press S for the service picker, or type @ followed by a prefix such as ec2 and press Enter.

Set default_service in the config file to skip the splash.

Command line

Every flag overrides the config file for that run only.

Flag	Effect
`-s`, `--service <SERVICE>`	Open a service on startup (`ec2`, `s3`, `@cw`, …)
`-r`, `--region <REGION>`	Start in this region
`-p`, `--profile <PROFILE>`	Use this named AWS profile
`-w`, `--watch`	Start in watch mode (auto-refresh)
`-m`, `--macro <NAME>`	Run a saved macro on startup
`--theme <THEME>`	Colour preset
`--endpoint-url <URL>`	Point at a local emulator
`--banner` / `--no-banner`	Show or hide the ASCII banner

The screen

Top to bottom: the service strip with the region and profile badges, the search bar, the sub-tabs for the current service, then the list pane on the left and the detail pane on the right, and a status bar. The status bar shows contextual key hints, and any error is y-copyable from it; M reviews past messages.

l, → or Enter moves from the list into the detail pane; h, ← or Esc comes back. That spatial left-and-right is the whole navigation model.