macOS
brew install awscli
local Homebrew formula metadata
Renseignements sur le paquet brew
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de awscli pour les workflows d'agents IA.
installation
sudo av install brew:awscli
brew install awscli
local Homebrew formula metadata
sudo apt install awscli
Debian stable package indexes · awscli · source: deb.debian.org
nix profile install nixpkgs#awscli
nixpkgs package indexes · pkgs/by-name/aw/awscli/package.nix · source: api.github.com
sudo dnf install aws
Fedora Rawhide package metadata · aws · source: dl.fedoraproject.org
choco install awscli
Chocolatey community package catalog · awscli · source: community.chocolatey.org
scoop install main/aws
Scoop official bucket manifest trees · bucket/aws.json · source: api.github.com
aperçu
Automic Vault publie les chemins d'installation, les faits d'exécutables et les métadonnées de sécurité propres à awscli depuis les données locales de paquets.
Official Amazon AWS command-line interface
radioisotope
`aws` stores credentials as plaintext at ~/.aws/credentials. Our isotope securely locks them in the macOS keychain such that only the root-controlled `aws` launcher running isolated Python can retrieve them through AWS' native credential_process protocol. External AWS CLI legacy plugins are disabled because they can run inside that credential-approved process. Explicit `aws config export-credentials` output is approval gated.
orange risque · high confiance · infrastructure
Extrait README local
aws-cli IsotopeThe isotope now uses AWS' native credential_process protocol instead of placing AWS secrets in the aws process environment.
Migration moves plain text keys from ~/.aws/credentials to the Keychain and installs this non-secret config in ~/.aws/config:
[default]
credential_process = /usr/local/bin/av credential-helper aws
The installed /opt/awscli/bin/aws launcher runs AWS Python in isolated mode and mints a short-lived AUTOMIC_VAULT_CREDENTIAL_HELPER_TOKEN for the AWS process. The helper only answers when that token is present and the parent process is the root-controlled AWS launcher path running under isolated Python, so unrelated processes cannot call the helper directly to retrieve credentials and cannot use PYTHONPATH/sitecustomize injection to make AWS Python call it. The isotope also disables AWS CLI legacy external plugins because those plugins run as Python code inside the credential-approved AWS process.
aws config export-credentials is approval gated before it can print the credential-process result, including invocations with AWS global options before the config command.
Detection also treats aws login cache files under ~/.aws/login/cache as plain text credentials. Migration warns when those files are present because this isotope cannot safely migrate the result of aws login.
We assume a single profile and user. If you have more complex credential requirements you should use brew:aws-vault-binary instead. It’s more cumbersome but also more capable.
AWS CLI legacy external plugins configured under [plugins] are intentionally disabled. If your workflow depends on them, use non-isotoped brew:awscli or a dedicated credential manager.
Source: data/radioisotopes/aws-cli/README.md
portes d'approbation
La graine locale de portes d'approbation contient 8 règles pour awscli. Points d'entrée couverts : aws. Niveaux de sévérité : critical, high. Couverture : partial, revue 2026-05-21.
exécutables
| Commande | Type | Exposition | Note |
|---|---|---|---|
aws | cli | global executable | Primary AWS command-line interface. |
aws_completer | completion helper | Homebrew executable; excluded from Automic Vault stubs | Shell completion helper for aws. |
fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
https://github.com/aws/aws-cli
métadonnées d'installation
| Clé du paquet | brew:awscli |
|---|---|
| Version | 2.34.53 |
| Gestionnaire de paquets | Homebrew |
| Page du gestionnaire de paquets | https://formulae.brew.sh/formula/awscli |
| Page d'accueil | https://aws.amazon.com/cli/ |
| Dépôt | https://github.com/aws/aws-cli |
| Docs amont | https://docs.aws.amazon.com/cli/ |
| Licence | Apache-2.0 |
| Archive source | https://github.com/aws/aws-cli/archive/refs/tags/2.34.53.tar.gz |
| Mis à jour | 2026-05-22T22:50:32Z |
| vérifié | 2026-05-23 |
| Pulse | updated |
| Dépendances | openssl@3, python@3.14 |
| Dépendances de compilation | cmake |
| Bibliothèques fournies par macOS | libffi, mandoc |
| Bouteille | disponible (arm64_tahoe, arm64_sequoia, arm64_sonoma, sonoma, arm64_linux, x86_64_linux) |
| post-install Homebrew | non défini |
| Service | aucun déclaré |
| Caveats | The examples directory has been installed to $HOMEBREW_PREFIX/share/awscli/examples. |
piste source
Cette page est écrite par scripts/generate-pkg-pages.py. Les déploiements refusent de publier si www/pkg/ est obsolète par rapport aux données locales de paquets.