Safety & dry-run

awsutopia tries hard not to surprise you in a live account.

Confirmations

These ask [y/N] unless you pass --yes:

• create bucket --public-site
• create fn --public
• destroy bucket / destroy secret / destroy fn / destroy cron

Decline → no-op + exit 5 (CONFIRMATION_DECLINED). Non-TTY sessions decline by default (safe for CI).

Dry-run

Prefer --dry-run when you're exploring:

awsutopia create bucket example --dry-run --json
awsutopia destroy bucket example --dry-run --json
awsutopia bucket share example key.txt --expires 1h --dry-run

Secure defaults (buckets)

Private, SSE-S3, versioning on, Block Public Access on. Public is opt-in only.

Ownership

Destroy and share only touch utopia-tagged resources that match your current project, unless you pass --force. Untagged buckets stay untouched. See Destroy policy.