install

Additional install commands

macOS

Homebrewverified · 100%

brew install aws-rotate-key

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#aws-rotate-key

nixpkgs package indexes · pkgs/by-name/aw/aws-rotate-key/package.nix · source: api.github.com

overview

Package summary

Easily rotate your AWS access key

Project links

Commands and aliases

aws-rotate-key

history

Project history and usage

aws-rotate-key is a small Go CLI for rotating AWS IAM access keys stored in the shared AWS credentials file.

Project history

The public repository begins in September 2016 with commits that create a new key, replace the old key in the credentials file, inspect last-used metadata, and add the README. Its purpose has remained narrow: automate a security best-practice task that is easy to perform incorrectly by hand.

Adoption history

The README documents binaries from GitHub Releases, Homebrew installation on macOS, a PPA for Ubuntu, and go install. That packaging mix reflects a utility meant for individual operators and small automation scripts rather than a larger platform.

How it is used

The tool reads AWS credentials from the credentials file, lists the IAM user's access keys, explains the planned rotation steps, waits for confirmation unless told otherwise, writes the new key pair back to the credentials file, and deactivates or deletes the old key.

It supports profile selection, an alternate authentication profile, MFA, automatic yes-to-prompts, and deleting rather than deactivating the old key.

Why package nerds care

Its package-manager appeal is that it turns a fussy IAM/API sequence into one binary with few moving parts. The downside for maintainers is that it edits credentials directly, so provenance and version trust matter more than the code size suggests.

Timeline

2016: Initial public commits implement key creation and credentials-file replacement.
2016: v1.0.0 tag appears.
2024: Current code uses AWS SDK for Go v2 modules in go.mod.

Related projects

AWS IAM access-key rotation guidance and AWS CLI shared credentials files are the upstream AWS surfaces the tool automates.

Sources

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html#Using_RotateAccessKey
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html
https://github.com/stefansundin/aws-rotate-key#readme
official git history and tags from https://github.com/stefansundin/aws-rotate-key

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 8 platform targets.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.aws/credentials
Windows: C:\Users\USERNAME\.aws\credentials

executables

Installed executables

Command	Kind	Exposure	Note
`aws-rotate-key`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version1.2.0

manager updated

local dataok

upstreamcurrent

latest detectedv1.2.0

https://github.com/stefansundin/aws-rotate-key

infoNo package-manager update timestamp was available.low confidence

install metadata

Package metadata

Package key	brew:aws-rotate-key
Version	1.2.0
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/aws-rotate-key
Homepage	https://github.com/stefansundin/aws-rotate-key
Repository	https://github.com/stefansundin/aws-rotate-key
Upstream docs	https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
License	MIT
Source archive	https://github.com/stefansundin/aws-rotate-key/archive/refs/tags/v1.2.0.tar.gz
Build dependencies	go
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	aws-rotate-key
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

aws-rotate-key

nix profile install nixpkgs#aws-rotate-key

normalized package name match
Matched by: Aws Rotate Key

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/aw/aws-rotate-key/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/aws-rotate-key.yml

Used sources

Geiger risk classifier
Nucleus package database
av.db category and tag curation
cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
external package-manager database matches
package relationship graph
package version freshness
package-page enrichment

Install aws-rotate-key with Homebrew, Nix