Configuration - S2

Managing Config

# List all config values
s2 config list

# Get a specific value
s2 config get account_endpoint

# Unset a value
s2 config unset account_endpoint

s2 config list reports a configured access token as <redacted>, and s2 config get access_token does not reveal the credential. Use the s2 auth access-token commands to manage access tokens.

Default Location

When create-basin is called without --location, the basin uses the account’s default location.

s2 list-locations
s2 get-default-location
s2 set-default-location aws:us-east-1

Environment Variables

The CLI also reads endpoint overrides and command-specific settings from environment variables, which is useful when pointing at s2-lite or working with encrypted streams:

Variable	Description
`S2_ACCESS_TOKEN`	Non-persistent access token override; takes precedence over browser login and a stored access token
`S2_ACCOUNT_ENDPOINT`	Account-level API endpoint
`S2_BASIN_ENDPOINT`	Basin-level API endpoint
`S2_ENCRYPTION_KEY`	Encryption key used by `append`, `read`, and `tail` commands, if configured

# Example: pointing at a local s2-lite instance
export S2_ACCOUNT_ENDPOINT="http://localhost:8080"
export S2_BASIN_ENDPOINT="http://localhost:8080"
export S2_ACCESS_TOKEN="ignored"

⌘I