Profiles are a silent trap. They hide. Developers create them in a rush, forget to document them, and months later the CLI feels like a locked cabinet with mismatched keys. This isn’t about credentials alone. It’s about discoverability, consistency, and control.
AWS CLI-style profiles should make switching accounts effortless. Instead, without clear visibility, they create silos. One engineer has sandbox-prod, another has prod-sandbox, and no one is sure which maps to the real production account. In large setups, this problem multiplies. The risk isn’t just confusion—it’s accidental deployments to the wrong environment, wasted debugging cycles, and compliance blind spots.
Discoverability solves that. Imagine every profile—its name, purpose, and scope—instantly visible. No digging through ~/.aws/config in every developer’s laptop. No outdated README entries that tell only half the story. True discoverability means you can enforce naming standards, track environment coverage, and onboard new team members in minutes instead of hours.