opsworks-cli needs to access the AWS API using your credentials. Just like the AWS SDK or CLI, it will look for credentials in two places: opsworks-cli update-custom-cookbooks --region eu-west-1 \ ...