switch-profile 0.2.3 → 1.1.0

package/CHANGELOG.md

@@ -2,6 +2,20 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [1.1.0](https://github.com/nicolasdao/switch-profile/compare/v1.0.0...v1.1.0) (2026-03-21)
+
+
+### Features
+
+* add Windows compatibility for profile switching, config parsing, and shell hints ([16ce46b](https://github.com/nicolasdao/switch-profile/commit/16ce46bc5cb1d92fc6d882358eaabc718a157f22))
+
+## [1.0.0](https://github.com/nicolasdao/switch-profile/compare/v0.2.3...v1.0.0) (2026-03-21)
+
+
+### Features
+
+* Display export AWS_PROFILE hint after profile switch for per-terminal isolation ([7dd09c8](https://github.com/nicolasdao/switch-profile/commit/7dd09c882708fcafd66fefc6139cd97a13d9b2fb))
+
 ### [0.2.3](https://github.com/nicolasdao/switch-profile/compare/v0.2.2...v0.2.3) (2026-02-11)
 
 

package/README.md

@@ -52,6 +52,7 @@ This will:
 1. Show your current default profile with its expiry status.
 2. List all available profiles.
 3. Let you pick one to set as the new `default`.
+4. Display an `export AWS_PROFILE=<name>` command you can run to lock that profile to your current terminal session.
 
 For SSO profiles, if the session has expired, it automatically opens your browser for re-authentication.
 
@@ -97,6 +98,11 @@ When you select a profile, `switch-profile`:
 1. Retrieves the credentials for that profile (from cache or via SSO login).
 2. Writes them into the `[default]` section of both files.
 3. Records the profile name and expiry date for status display.
+4. Shows an `export AWS_PROFILE=<name>` command to optionally lock the profile to your terminal session.
+
+### Per-terminal profile isolation
+
+By default, switching profiles updates the global `[default]` section, which affects all terminals. If you need different AWS profiles in different terminals simultaneously, copy and run the command shown after each switch (`export AWS_PROFILE=<name>` on Linux/macOS, or the PowerShell/CMD equivalent on Windows). This sets an environment variable scoped to that terminal only, so other terminals remain unaffected.
 
 For SSO profiles specifically, it leverages two additional AWS CLI cache directories:
 - `~/.aws/sso/cache/` - SSO session tokens (long-lived, ~24 hours)
@@ -113,6 +119,7 @@ For deeper technical details, see the docs below:
 | [CLI Interface](docs/cli-interface.md) | Detailed walkthrough of every menu, prompt, and user flow |
 | [Configuration Files](docs/configuration-files.md) | Exact formats of all AWS and internal configuration files |
 | [Development Guide](docs/development-guide.md) | How to set up, develop, test, lint, and release |
+| [Gotchas](docs/gotchas.md) | Critical pitfalls — global profile switching, per-terminal isolation limits, and LLM agent constraints |
 
 ## Troubleshooting
 

package/docs/architecture.md

@@ -37,7 +37,8 @@ The main executable file (with `#!/usr/bin/env node` shebang). Registered as the
 | Function | Purpose |
 |----------|---------|
 | `switchCmd()` | Main command handler. Checks AWS CLI, shows current profile status, lists profiles, renders the selection menu. |
-| `setProfileToDefault(name, list, msg)` | Gets credentials for a profile, writes them as the `[default]` profile. Shows a clear error if the profile is not found in the list. |
+| `setProfileToDefault(name, list, msg)` | Gets credentials for a profile, writes them as the `[default]` profile. Shows a clear error if the profile is not found in the list. Displays the `export AWS_PROFILE` hint on success. |
+| `printExportHint(profileName)` | Displays a cyan box with the profile isolation command. On Linux/macOS shows `export AWS_PROFILE=<name>`. On Windows shows both PowerShell (`$env:AWS_PROFILE`) and CMD (`set AWS_PROFILE`) variants. Box width adjusts dynamically. |
 | `createNewProfile(profiles, makeItDefault)` | Walks the user through creating a standard or SSO profile. Displays an SSO Setup Guide before SSO creation and checks for errors before reporting success. |
 | `chooseProfileName(denyList)` | Validates profile name input (lowercase alphanumeric, dashes, underscores, min 2 chars, no duplicates). |
 | `chooseRegions()` | Autocomplete region picker from the 24 supported AWS regions. |
@@ -56,6 +57,8 @@ The core module. Handles all interactions with AWS configuration files and the A
 - Creating, deleting, and listing profiles.
 - Refreshing expired SSO sessions (including browser redirect).
 
+**Windows compatibility:** Uses `IS_WINDOWS` (`process.platform === 'win32'`) to select platform-appropriate line separator for parsing (`LINE_SEP`: regex `/\r?\n/` on Windows, `os.EOL` otherwise), newline character for writing (`NL`: `'\n'` on Windows, `os.EOL` otherwise), and `shell: true` for `spawn` on Windows (required because `aws` is a `.cmd` batch file).
+
 See [AWS Profile Management](aws-profile-management.md) for a detailed breakdown of every function.
 
 ### `src/aws/regions.js` - Region Definitions
@@ -181,5 +184,16 @@ User runs: npx switch-profile
     │  section to:         │
     │  - ~/.aws/credentials│
     │  - ~/.aws/config     │
+    └──────────────────────┘
+               │
+               ▼
+    ┌──────────────────────┐
+    │  printExportHint     │
+    │                      │
+    │  Shows:              │
+    │  export AWS_PROFILE= │
+    │  <name>              │
+    │  for per-terminal    │
+    │  isolation           │
     └──────────────────────┘
 ```

package/docs/aws-profile-management.md

@@ -202,7 +202,7 @@ If the config or credentials files don't exist, they are created with a default
 
 Creates an SSO profile by spawning the interactive `aws configure sso --profile <name>` command. This hands control to the AWS CLI, which walks the user through the SSO setup (URL, region, account, role).
 
-Uses `spawn` with `stdio: 'inherit'` so the user interacts directly with the AWS CLI process. Checks the exit code of the spawned process and throws an error if it is non-zero, indicating the SSO setup failed.
+Uses `spawn` with `stdio: 'inherit'` so the user interacts directly with the AWS CLI process. On Windows, `shell: true` is also passed because `aws` is typically a `.cmd` batch file that requires shell resolution. Checks the exit code of the spawned process and throws an error if it is non-zero, indicating the SSO setup failed.
 
 #### `deleteProfiles(profiles)`
 

package/docs/cli-interface.md

@@ -21,7 +21,7 @@ Before anything else, the tool verifies AWS CLI v2+ is installed. If not found,
 
 - **macOS:** `brew install awscli && brew link --overwrite awscli`
 - **Linux:** curl + unzip instructions for the AWS CLI v2 installer
-- **Windows:** Generic "not installed" message
+- **Windows:** "Not installed" message with a link to the AWS CLI MSI installer download page
 
 ### Step 2: Default Profile Status
 
@@ -82,10 +82,35 @@ Selecting a profile from the list sets it as the `default`. For SSO profiles, th
 
 On success:
 
+**Linux / macOS:**
 ```
 AWS profile sso-dev successfully set up as default.   # Green
+
+┌─────────────────────────────────────────────────────────┐
+│  To lock this profile to this terminal session, run:    │  # Cyan
+│                                                         │
+│    export AWS_PROFILE=sso-dev                           │  # Cyan + Bold
+│                                                         │
+│  This prevents other terminals from affecting this one. │
+└─────────────────────────────────────────────────────────┘
 ```
 
+**Windows:**
+```
+AWS profile sso-dev successfully set up as default.   # Green
+
+┌──────────────────────────────────────────────────────────────┐
+│  To lock this profile to this terminal session, run:         │  # Cyan
+│                                                              │
+│    PowerShell:  $env:AWS_PROFILE = "sso-dev"                 │  # Cyan + Bold
+│    CMD:         set AWS_PROFILE=sso-dev                      │  # Cyan + Bold
+│                                                              │
+│  This prevents other terminals from affecting this one.      │
+└──────────────────────────────────────────────────────────────┘
+```
+
+This hint appears after every successful profile switch, refresh, or new profile set as default. Running the displayed command sets the `AWS_PROFILE` environment variable in the current terminal only, enabling per-terminal profile isolation.
+
 ### Step 4b: More Options
 
 Selecting "More options" opens a submenu:
@@ -234,10 +259,21 @@ Selecting it:
 2. Retrieves fresh credentials (SSO login if needed).
 3. Updates the `[default]` section.
 
+**Linux / macOS:**
 ```
 AWS profile sso-dev successfully refreshed.    # Green
+
+┌─────────────────────────────────────────────────────────┐
+│  To lock this profile to this terminal session, run:    │  # Cyan
+│                                                         │
+│    export AWS_PROFILE=sso-dev                           │  # Cyan + Bold
+│                                                         │
+│  This prevents other terminals from affecting this one. │
+└─────────────────────────────────────────────────────────┘
 ```
 
+On Windows, the hint shows PowerShell and CMD equivalents instead (see [Step 4a](#step-4a-select-a-profile)).
+
 ## Visual Indicators
 
 | Color | Meaning |
@@ -247,6 +283,7 @@ AWS profile sso-dev successfully refreshed.    # Green
 | **Cyan** | Informational (current profile, time remaining) |
 | **Yellow** | Warnings (expired, expiring soon) |
 | **Bold** | Profile names in messages |
+| **Cyan + Bold** | Profile isolation command hint (`export AWS_PROFILE=...` on Unix, PowerShell/CMD equivalents on Windows) |
 
 ## Error Display
 

package/docs/gotchas.md

@@ -0,0 +1,82 @@
+# Gotchas
+
+Critical pitfalls and edge cases that are not immediately obvious when using `switch-profile`.
+
+## Table of Contents
+
+- [Profile switching is global by default](#profile-switching-is-global-by-default)
+    - [The problem](#the-problem)
+    - [The solution: `export AWS_PROFILE`](#the-solution-export-aws_profile)
+    - [The limitation: you must copy-paste it yourself](#the-limitation-you-must-copy-paste-it-yourself)
+    - [LLM agents and automation](#llm-agents-and-automation)
+
+## Profile switching is global by default
+
+### The problem
+
+When you run `npx switch-profile` and select a profile, the tool writes credentials into the `[default]` section of `~/.aws/credentials` and `~/.aws/config`. These are **global files** shared by every terminal, every tool, and every process on the machine.
+
+This means:
+- If Terminal A switches to `dev`, Terminal B is now also on `dev`.
+- If Terminal B then switches to `prod`, Terminal A is silently moved to `prod` too.
+- Any concurrent process relying on `[default]` (Terraform, CDK, scripts) is affected immediately.
+
+### The solution: `export AWS_PROFILE`
+
+After every successful switch, `switch-profile` displays a box like:
+
+```
+┌─────────────────────────────────────────────────────────┐
+│  To lock this profile to this terminal session, run:    │
+│                                                         │
+│    export AWS_PROFILE=dev                               │
+│                                                         │
+│  This prevents other terminals from affecting this one. │
+└─────────────────────────────────────────────────────────┘
+```
+
+Running the displayed command sets an environment variable **scoped to that terminal session only**. The AWS CLI and all AWS SDKs honor `AWS_PROFILE` and will use the named profile directly — bypassing `[default]` entirely. Other terminals remain unaffected.
+
+On **Linux / macOS**: `export AWS_PROFILE=dev`
+On **Windows (PowerShell)**: `$env:AWS_PROFILE = "dev"`
+On **Windows (CMD)**: `set AWS_PROFILE=dev`
+
+### The limitation: you must copy-paste it yourself
+
+`switch-profile` **cannot** set the environment variable for you. This is a fundamental operating system constraint: a child process (the `npx` command) cannot modify the environment of its parent process (your terminal shell). The displayed command (`export` on Unix, `$env:` on PowerShell, `set` on CMD) must be run directly in the terminal by the user.
+
+There is no workaround for this within the tool itself. The user must manually copy-paste and run the `export AWS_PROFILE=<name>` command shown after each switch.
+
+### LLM agents and automation
+
+When an LLM agent (e.g., a Claude Code skill) uses `switch-profile` via a shell tool, the same constraint applies — but with an additional twist.
+
+**Environment variables do not persist between shell tool invocations.** Each time an LLM agent runs a Bash command, it spawns a **new shell subprocess**. So even if the agent runs `export AWS_PROFILE=dev` in one command, that variable is gone in the next command.
+
+**Workaround:** The agent must prefix every AWS command with the profile inline:
+
+```shell
+AWS_PROFILE=dev aws s3 ls
+AWS_PROFILE=dev terraform plan
+AWS_PROFILE=prod aws sts get-caller-identity
+```
+
+This works reliably and supports concurrent agents using different profiles, since each command carries its own profile context with no shared global state.
+
+**What does NOT work for agents:**
+
+```shell
+# Command 1 — sets the variable, but only in this subprocess
+export AWS_PROFILE=dev
+
+# Command 2 — this is a NEW subprocess, AWS_PROFILE is not set here
+aws s3 ls   # Uses [default], NOT dev
+```
+
+**Chaining commands in a single invocation** also works but is less practical for multi-step workflows:
+
+```shell
+export AWS_PROFILE=dev && aws s3 ls && aws sts get-caller-identity
+```
+
+**Summary for skill/agent authors:** After running `npx switch-profile` to authenticate and ensure the SSO session is valid, extract the profile name and use `AWS_PROFILE=<name>` as an inline prefix on every subsequent AWS command.

package/index.js

@@ -6,6 +6,7 @@
 const program = require('commander')
 const inquirer = require('inquirer')
 const { EOL } = require('os')
+const IS_WINDOWS = process.platform === 'win32'
 const { listProfiles, getCredentials, getDefaultProfile, updateDefaultProfile, deleteProfiles, createProfile, regions, createSsoProfile, awsCliV2Exists } = require('./src/aws')
 const { printAWSerrors } = require('./src/core')
 require('colors')
@@ -179,7 +180,8 @@ const switchCmd = async () => {
 			console.log('brew link --overwrite awscli')
 			return 
 		} else if (process.platform == 'win32') {
-			console.log('AWS CLI seems to not be installed.'.red)
+			console.log('AWS CLI seems to not be installed. Download the installer from:\n'.red)
+			console.log('https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html')
 			return
 		} else {
 			console.log('AWS CLI seems to not be installed. Try installing it as follow\n'.red)
@@ -330,6 +332,35 @@ const switchCmd = async () => {
 	}
 }
 
+const printExportHint = (profileName) => {
+	const lines = IS_WINDOWS ? [
+		'  To lock this profile to this terminal session, run:  ',
+		'',
+		`    PowerShell:  $env:AWS_PROFILE = "${profileName}"`,
+		`    CMD:         set AWS_PROFILE=${profileName}`,
+		'',
+		'  This prevents other terminals from affecting this one.  '
+	] : [
+		'  To lock this profile to this terminal session, run:  ',
+		'',
+		`    export AWS_PROFILE=${profileName}`,
+		'',
+		'  This prevents other terminals from affecting this one.  '
+	]
+	const width = Math.max(...lines.map(l => l.length))
+	const pad = s => s + ' '.repeat(width - s.length)
+	console.log('')
+	console.log(('┌' + '─'.repeat(width) + '┐').cyan)
+	const boldStart = IS_WINDOWS ? 2 : 2
+	const boldEnd = IS_WINDOWS ? 3 : 2
+	for (let i = 0; i < lines.length; i++) {
+		const content = '│' + pad(lines[i]) + '│'
+		console.log(i >= boldStart && i <= boldEnd ? content.cyan.bold : content.cyan)
+	}
+	console.log(('└' + '─'.repeat(width) + '┘').cyan)
+	console.log('')
+}
+
 const setProfileToDefault = async (profileName, profileList, successMsg) => {
 	const profile = profileList.find(p => p.friendlyName == profileName || p.name == profileName)
 
@@ -357,6 +388,7 @@ const setProfileToDefault = async (profileName, profileList, successMsg) => {
 		return printAWSerrors([new Error('Fail to update the default profile'), ...errors])
 
 	console.log((successMsg || `AWS profile ${profile.name.bold} successfully set up as default.`).green)
+	printExportHint(profile.name)
 }
 
 // 1. Creates your first command. This example shows an 'order' command with a required argument

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switch-profile",
-  "version": "0.2.3",
+  "version": "1.1.0",
   "main": "index.js",
   "bin": "index.js",
   "description": "NPX script that exposes terminal shortcut to easily switch between cloud configuration (aws, gcp).",

package/skills-lock.json

@@ -0,0 +1,73 @@
+{
+	"lockVersion": 1,
+	"generatedAt": "2026-03-21T07:51:15.981Z",
+	"skills": {
+		"happyskillsai/happyskills": {
+			"version": "1.17.0",
+			"ref": "refs/tags/v1.17.0",
+			"commit": "8024d2ee1efd9f17391ebd701a6e6131eafec14777d550e23d3d3a50b5d11439",
+			"integrity": "sha256-24e69e779a31ade191ae2fb9dec5a90d28fd9d4afcda2851fc048dd03093c6fb",
+			"requested_by": [
+				"__root__"
+			],
+			"dependencies": {}
+		},
+		"nicolasdao/_kit-dev-essentials": {
+			"version": "1.0.0",
+			"ref": "refs/tags/v1.0.0",
+			"commit": "7c793754d999f50dc44e289b6d190e5f9dc2959e132f62c84625897ced7f95f7",
+			"integrity": "sha256-f4fe6b211aa96bbc291c880a4a61682bf5d438a52db0b82e73f42e7126c39e45",
+			"requested_by": [
+				"__root__"
+			],
+			"dependencies": {
+				"nicolasdao/git-commit": "*",
+				"nicolasdao/update-doc": "*",
+				"nicolasdao/init-doc": "*",
+				"nicolasdao/init-context": "*"
+			},
+			"type": "kit"
+		},
+		"nicolasdao/git-commit": {
+			"version": "1.0.1",
+			"ref": "refs/tags/v1.0.1",
+			"commit": "315daee8d9d3ad5e88c42ed35b8e89ccc7ff57bfc28ef0d72ad5122c8e834e19",
+			"integrity": "sha256-d7e5a0e9afe9f2633e4e9ad64d8248fca0ee8e20a44f54586474bbfecc79d7e7",
+			"requested_by": [
+				"nicolasdao/_kit-dev-essentials"
+			],
+			"dependencies": {}
+		},
+		"nicolasdao/update-doc": {
+			"version": "1.0.4",
+			"ref": "refs/tags/v1.0.4",
+			"commit": "6394de7f8b487c16700f84d5235a3dca5746205d2abafbdfad02e59bbd924a60",
+			"integrity": "sha256-e60d3df49530031a5f663aed8a6999fda6b4caab4deba249ec7cfd5ec65f085c",
+			"requested_by": [
+				"nicolasdao/_kit-dev-essentials"
+			],
+			"dependencies": {}
+		},
+		"nicolasdao/init-doc": {
+			"version": "0.1.1",
+			"ref": "refs/tags/v0.1.1",
+			"commit": "9603e12aa7dba8c2d6903f249a60b418f3913c94dddfde266e065d1b9bbd0171",
+			"integrity": "sha256-567e6e55d27b9873bf1664bd7992cc8d3b7045e4d371de136245e5193e04b680",
+			"requested_by": [
+				"nicolasdao/_kit-dev-essentials"
+			],
+			"dependencies": {},
+			"type": "skill"
+		},
+		"nicolasdao/init-context": {
+			"version": "1.0.1",
+			"ref": "refs/tags/v1.0.1",
+			"commit": "a52d089f1c6a102feac17b99e7df72e29899952f393013bd479e3f97cc614f32",
+			"integrity": "sha256-417c5dc3e0b59f785fd8af166bbaa757f4bfac8343d7365708342e84d386bd01",
+			"requested_by": [
+				"nicolasdao/_kit-dev-essentials"
+			],
+			"dependencies": {}
+		}
+	}
+}

package/src/aws/index.js

@@ -6,6 +6,9 @@ const { spawn } = require('child_process')
 const fileHelper = require('../fileHelper')
 const regions = require('./regions')
 
+const IS_WINDOWS = process.platform === 'win32'
+const LINE_SEP = IS_WINDOWS ? /\r?\n/ : EOL
+const NL = IS_WINDOWS ? '\n' : EOL
 const SSO_GET_CREDS_TIMEOUT = 5*60*1000 // 5 minutes to complete the SSO login
 const AWS_CONFIG_FILE = join(homedir(), '.aws', 'config')
 const AWS_CREDS_FILE = join(homedir(), '.aws', 'credentials')
@@ -100,7 +103,7 @@ const listProfiles = () => catchErrors((async () => {
 	return profiles.map(profile => {
 		const [,rest=''] = configStr.split(profile)
 		const [config=''] = rest.split('[')
-		const params = config.split(EOL)
+		const params = config.split(LINE_SEP)
 		const p = {
 			name: profile.replace(/(^\[profile\s+|\[|\])/g, ''),
 			sso_start_url: getParam(params, 'sso_start_url'),
@@ -118,7 +121,7 @@ const listProfiles = () => catchErrors((async () => {
 			const ssoSessionMatch = configStr.split(ssoSessionSection)
 			if (ssoSessionMatch.length > 1) {
 				const [ssoSessionRest=''] = ssoSessionMatch[1].split('[')
-				const ssoSessionParams = ssoSessionRest.split(EOL)
+				const ssoSessionParams = ssoSessionRest.split(LINE_SEP)
 				p.sso_start_url = getParam(ssoSessionParams, 'sso_start_url')
 				// If sso_region is not in profile, check the session section
 				if (!p.sso_region) {
@@ -384,7 +387,7 @@ const getCredentials = (profile, ssoUrl) => catchErrors((async () => {
 			throw new Error(`Profile ${profile} not found in ${AWS_CREDS_FILE}. Standard profiles must have credentials defined in this file.`)
 
 		const [config=''] = rest.split('[')
-		const params = config.split(EOL)
+		const params = config.split(LINE_SEP)
 		const creds = {
 			aws_access_key_id: getParam(params, 'aws_access_key_id'),
 			aws_secret_access_key: getParam(params, 'aws_secret_access_key'),
@@ -404,16 +407,16 @@ const updateDefaultProfile = ({ profile, region, expiry_date, aws_access_key_id,
 	if (credsStrErrors||configStrErrors)
 		throw wrapErrors(errMsg, credsStrErrors||configStrErrors)
 
-	const newDefaultCreds = '[default]'+EOL+
-		`aws_access_key_id = ${aws_access_key_id}`+EOL+
-		`aws_secret_access_key = ${aws_secret_access_key}`+EOL+
-		(aws_session_token ? `aws_session_token = ${aws_session_token}`+EOL : '') +
-		(expiry_date ? `expiry_date = ${expiry_date.toISOString()}`+EOL : '') +
-		`profile = ${profile}`+EOL+EOL
+	const newDefaultCreds = '[default]'+NL+
+		`aws_access_key_id = ${aws_access_key_id}`+NL+
+		`aws_secret_access_key = ${aws_secret_access_key}`+NL+
+		(aws_session_token ? `aws_session_token = ${aws_session_token}`+NL : '') +
+		(expiry_date ? `expiry_date = ${expiry_date.toISOString()}`+NL : '') +
+		`profile = ${profile}`+NL+NL
 
-	const newDefaultConfig = '[default]'+EOL+
-		`region = ${region}`+EOL+
-		'output = json'+EOL+EOL
+	const newDefaultConfig = '[default]'+NL+
+		`region = ${region}`+NL+
+		'output = json'+NL+NL
 
 	const defaultCredsSection = (credsStr.match(/\[default\]((.|\n|\r)*?)(\[|$)/)||[])[0]
 	const defaultConfigSection = (configStr.match(/\[default\]((.|\n|\r)*?)(\[|$)/)||[])[0]
@@ -442,7 +445,7 @@ const getDefaultProfile = () => catchErrors((async () => {
 	if (errors)
 		throw wrapErrors(errMsg, errors)
 
-	const params = ((credsStr.match(/\[default\]((.|\n|\r)*?)(\[|$)/)||[])[0]||'').split(EOL)
+	const params = ((credsStr.match(/\[default\]((.|\n|\r)*?)(\[|$)/)||[])[0]||'').split(LINE_SEP)
 	const creds = {
 		aws_access_key_id: getParam(params, 'aws_access_key_id'),
 		aws_secret_access_key: getParam(params, 'aws_secret_access_key'),
@@ -526,14 +529,14 @@ const createProfile = ({ name, aws_access_key_id, aws_secret_access_key, region
 	if (configStrErrors||credsStrErrors)
 		throw wrapErrors(errMsg, configStrErrors||credsStrErrors)
 
-	const configProfiles = [`[profile ${name}]`+EOL]
-	const credsProfiles = [`[${name}]`+EOL]
+	const configProfiles = [`[profile ${name}]`+NL]
+	const credsProfiles = [`[${name}]`+NL]
 
-	credsProfiles.push(`aws_access_key_id = ${aws_access_key_id}`+EOL)
-	credsProfiles.push(`aws_secret_access_key = ${aws_secret_access_key}`+EOL+EOL)
+	credsProfiles.push(`aws_access_key_id = ${aws_access_key_id}`+NL)
+	credsProfiles.push(`aws_secret_access_key = ${aws_secret_access_key}`+NL+NL)
 
-	configProfiles.push(`region = ${region}`+EOL)
-	configProfiles.push('output = json'+EOL+EOL)
+	configProfiles.push(`region = ${region}`+NL)
+	configProfiles.push('output = json'+NL+NL)
 
 	const newCreds = credsProfiles.join('')
 	const newConfig = configProfiles.join('')
@@ -543,14 +546,14 @@ const createProfile = ({ name, aws_access_key_id, aws_secret_access_key, region
 	if (!credsStr)
 		credsStr = DEFAULT_CREDS
 
-	await fileHelper.write(AWS_CONFIG_FILE, configStr+EOL+newConfig)
-	await fileHelper.write(AWS_CREDS_FILE, credsStr+EOL+newCreds)
+	await fileHelper.write(AWS_CONFIG_FILE, configStr+NL+newConfig)
+	await fileHelper.write(AWS_CREDS_FILE, credsStr+NL+newCreds)
 })())
 
 const createSsoProfile = name => catchErrors((async () => {
 	await awsCliV2Exists()
 	const exitCode = await new Promise(next => {
-		const child = spawn('aws', ['configure', 'sso', '--profile', name],{ stdio: 'inherit' })
+		const child = spawn('aws', ['configure', 'sso', '--profile', name], { stdio: 'inherit', ...(IS_WINDOWS ? { shell: true } : {}) })
 		child.on('exit', code => next(code))
 	})
 	if (exitCode !== 0)