Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install aws-sso-cli

local Homebrew formula metadata

Linux

Nixverifiziert · 92%

nix profile install nixpkgs#aws-sso-cli

nixpkgs package indexes · pkgs/by-name/aw/aws-sso-cli/package.nix · Quelle: api.github.com

Windows

Scoopverifiziert · 92%

scoop install main/aws-sso-cli

Scoop official bucket manifest trees · bucket/aws-sso-cli.json · Quelle: api.github.com

Überblick

Paketzusammenfassung

Securely manage AWS API credentials using AWS SSO

Projektlinks

Befehle und Aliase

aws-sso

Verlauf

Projektgeschichte und Nutzung

AWS SSO CLI is a Go command-line tool for AWS IAM Identity Center users who want a more ergonomic and more security-focused alternative to the stock AWS CLI SSO workflow. The project describes itself as a secure replacement for the `aws configure sso` wizard, with role selection, interactive search, profile generation, browser console helpers, and encrypted token storage.

Projektgeschichte

The public repository was created in May 2021 and early GitHub releases began with v1.0.0 in July 2021. It arrived after AWS CLI v2 added native SSO support, but focused on organizations with many accounts and many IAM roles, where plain AWS CLI profiles can become cumbersome.

The project evolved around two package-nerd concerns: a single static Go binary with official release artifacts, and a configuration model that could coexist with standard AWS CLI profile files. The documentation notes a move to XDG-style state under `~/.config/aws-sso` in v1.17.0 while keeping `~/.aws-sso` compatibility.

Adoptionsgeschichte

Homebrew carries `aws-sso-cli` in homebrew-core, and the project documentation names Homebrew as a first-class installation path. Its GitHub repository metadata showed hundreds of stars and forks in June 2026, and Homebrew analytics showed hundreds of 30-day installs, indicating use beyond a single organization without making it a default AWS tool.

Adoption has tracked the AWS IAM Identity Center transition: the README explicitly notes that AWS SSO was renamed IAM Identity Center, while the underlying config fields and APIs still use SSO terminology. That made the package useful during the long period when project names, AWS docs, and API names did not all say the same thing.

Wie es verwendet wird

Typical use is `aws-sso` for guided setup, `aws-sso exec` or shell helpers to export short-lived STS credentials, and generated entries in `~/.aws/config` for tools that already understand AWS named profiles. The README emphasizes encrypted storage for AWS SSO client secrets, access tokens, and CLI cache credentials.

The tool is most relevant for developers who switch across many AWS accounts and roles, especially when the AWS web console and CLI both need fast profile switching.

Warum Paket-Nerds sich dafür interessieren

For package maintainers, AWS SSO CLI is an example of a post-AWS-CLI-v2 helper that did not just wrap `aws sso login`; it packaged a more opinionated identity workflow as one cross-platform Go binary. The Homebrew formula tracks upstream release tags, while upstream also publishes binary, RPM, and DEB artifacts.

Zeitleiste

2021-05: Public GitHub repository created.
2021-07: v1.0.0 prerelease published on GitHub.
2021-10: v1.2.0 published as a non-prerelease GitHub release.
2026-06: v2.3.1 published; Homebrew stable version tracked v2.3.1.

Related projects

The README compares AWS SSO CLI to `aws-vault`, noting overlap in secure credential handling but a stronger focus on IAM Identity Center instead of long-term API keys.
`aws-sso-util` and `aws2-wrap` solve adjacent AWS SSO workflow gaps, especially profile generation, credential_process integration, or tools that lagged native SSO support.

Quellen

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für aws-sso-cli wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.config/aws-sso/config.yaml~/.aws-sso/config.yaml~/.aws/config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.aws/sso/cache/botocore-client-id-<region>.json~/.aws/sso/cache/<random>.json~/.aws/cli/cache/<random>.json~/.aws/credentials

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`aws-sso`	cli	globales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-08

Manager-Version2.3.1

Manager aktualisiert2026-06-20

lokale DatenOK

Upstreamaktuell

neueste erkannte Versionv2.3.1

https://github.com/synfinatic/aws-sso-cli

OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:aws-sso-cli
Version	2.3.1
Paketmanager	Homebrew
Paketmanager-Seite	https://formulae.brew.sh/formula/aws-sso-cli
Homepage	https://synfinatic.github.io/aws-sso-cli/
Repository	https://github.com/synfinatic/aws-sso-cli
Upstream-Dokumentation	https://github.com/synfinatic/aws-sso-cli#readme
Lizenz	GPL-3.0-only
Quellarchiv	https://github.com/synfinatic/aws-sso-cli/archive/refs/tags/v2.3.1.tar.gz
Zuletzt aktualisiert	2026-06-20T15:03:30Z
Pulse	updated
Build-Abhängigkeiten	go
Bottle	verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	nicht definiert
Dienst	keiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	aws-sso-cli
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

aws-sso-cli

nix profile install nixpkgs#aws-sso-cli

normalized package name match
Abgeglichen nach: Aws Sso Cli

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/aw/aws-sso-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Scoop95%

main/aws-sso-cli

scoop install main/aws-sso-cli

normalized package name match
Abgeglichen nach: Aws Sso Cli

Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/aws-sso-cli.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Combined YAML source

View the package source record on GitHub.

combined/aws-sso-cli.yml

Verwendete Quellen

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

aws-sso-cli mit Homebrew, Nix, scoop installieren