Setup

pier setup

The wizard handles the account groundwork once:

1. Authenticates against your AWS profile.
2. Creates an IAM role and instance profile carrying only AmazonSSMManagedInstanceCore, plus one egress-only security group.
3. Writes ~/.config/pier/config.toml.
4. Detects the agent config and credentials it will copy into sessions.
5. Offers to bake an image for the current repo.
6. Runs the pier doctor checks.

Everything it creates is tagged and removable with pier teardown. Change any setting later from inside the TUI. Run pier and press s.

Without IAM rights

No IAM permissions? Print the handful of commands for an admin to run once:

pier setup --print-admin

The wizard then works with what exists. The full permission list lives in AWS permissions.

Removing everything

pier teardown

Removes all pier groundwork from the account. Everything pier creates is tagged, so the sweep is complete: the role, the instance profile, the security group, and any baked images.