# Console access

**Console access**, in the dashboard, lists the accounts and permission sets assigned to you, also on accounts delegated to your Shonin org. **Refresh** updates the list.

## Open the console

Choose **Open console** on a row: the AWS console opens on that account, with that permission set. The session lasts one hour.

You confirmed your second factor when you signed in, so the console does not ask again for 8 hours. See [Second factor](second-factor.md).

## Access keys

**Access keys**, next to **Open console**, opens a page for that account and permission set:

- **Set up the AWS CLI and SDKs:** the `shonin login` command to paste in a terminal, for every assignment or only this one. It writes AWS CLI profiles that last 8 hours. See [Command line and SDKs](command-line.md).
- **Or set these variables:** temporary credentials for macOS and Linux, Windows and PowerShell, valid one hour.

## In AWS CloudTrail

Every session appears as `assumed-role/shonin-<Shonin org>-<permission set>/<email>`: the email of the person is the name of the session.