Configure

fgai configure stores an Account service-user access-key profile. It is the simple static credential setup path, similar in spirit to aws configure.

fgai configure \
  --profile dev-intl \
  --account-id "$ACCOUNT_ID" \
  --access-key-id "$ACCESS_KEY_ID" \
  --secret-access-key "$SECRET_ACCESS_KEY" \
  --name ci-service-user

The default credential name is default. Use --name when you need multiple credentials on the same machine.

Human interactive auth and workload federation are separate command families. Do not use fgai configure --kind workload-identity or paste browser tokens into fgai configure.

Equivalent explicit form:

fgai auth service-user configure \
  --profile dev-intl \
  --account-id "$ACCOUNT_ID" \
  --access-key-id "$ACCESS_KEY_ID" \
  --secret-access-key "$SECRET_ACCESS_KEY"

Credential files are written under the OS-native user config directory. Set FGAI_CLI_HOME to isolate test credentials:

FGAI_CLI_HOME="$(mktemp -d)" fgai configure \
  --profile localstack \
  --account-id 11111111-1111-1111-1111-111111111111 \
  --access-key-id AKIA_TEST \
  --secret-access-key test-secret