# Install awscli with Homebrew, chocolatey, apt, dnf, Nix, zypper, scoop

Official Amazon AWS command-line interface. Version 2.35.17 via Homebrew; verified 2026-07-07.

## Install

```sh
sudo av install brew:awscli
```

## Agent safety answer

awscli is a cloud-control CLI for AWS accounts, so agent runs should treat it as high-authority infrastructure access.

- **Credential access:** Reads AWS profiles, SSO cache, credential files, and environment credentials.
- **Remote mutation:** Can create, delete, and reconfigure AWS resources across many services.
- **Publish/artifact risk:** Can upload artifacts, deploy functions, and change release infrastructure.
- **Recommended control:** Use protected AWS credential helpers and approval gates for mutating commands.
- **Agent-use guidance:** Permit read-only inspection by default; require human approval for writes, deletes, credential export, and deploys.

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install awscli
```

  Evidence: local Homebrew formula metadata

### Linux

- Debian apt (92%):

```sh
sudo apt install awscli
```

  Evidence: Debian stable package indexes: awscli from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install awscli2
```

  Evidence: Fedora Rawhide package metadata: awscli2 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#awscli
```

  Evidence: nixpkgs package indexes: pkgs/by-name/aw/awscli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install aws-cli
```

  Evidence: openSUSE Tumbleweed package metadata: aws-cli from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install awscli
```

  Evidence: Chocolatey community package catalog: awscli from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','autodesk-fusion360'

- Scoop (92%):

```sh
scoop install main/aws
```

  Evidence: Scoop official bucket manifest trees: bucket/aws.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:awscli
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/awscli>
- **Version:** 2.35.17
- **Source summary:** Official Amazon AWS command-line interface
- **Homepage:** <https://aws.amazon.com/cli/>
- **Repository:** <https://github.com/aws/aws-cli>
- **Upstream docs:** <https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html>
- **License:** Apache-2.0
- **Source archive:** <https://github.com/aws/aws-cli/archive/refs/tags/2.35.17.tar.gz>
- **Last updated:** 2026-07-07T21:34:27Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- aws (cli)
- aws_completer (cli)
- aws (alias)
- aws_completer (alias)

## Dependencies

- openssl@3
- python@3.14

## Build dependencies

- cmake

## Uses from macOS

- libffi
- mandoc

## Install behavior

- Post-install hook: not defined
- Caveats: The "examples" directory has been installed to: $HOMEBREW_PREFIX/share/awscli/examples
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.35.17
- Package-manager updated: 2026-07-07
- Local data: ok
- Upstream repository: https://github.com/aws/aws-cli
- Upstream latest detected: 2.35.17 (current)
## Project history and usage

AWS CLI is Amazon Web Services' official command-line interface, packaging AWS service APIs behind a single `aws` executable for shell use, automation, and repeatable cloud operations. For package-manager users, the modern `awscli` formula tracks AWS CLI v2, while the legacy v1 line is packaged separately as `awscli@1`.

### Project history

The public `aws/aws-cli` repository was created in November 2012 and the 1.0.0 tag was cut in September 2013. Version 1 established the familiar Python-based command structure, shared AWS config and credentials files, profiles, output formats, and generated service commands that made AWS automation feel like a regular Unix tool.

AWS CLI v2 was previewed publicly with the `2.0.0dev0` tag in November 2018 and tagged 2.0.0 in February 2020. The v2 package became the preferred install target for the main AWS CLI docs and Homebrew formula, while v1 continued as a compatibility line for workflows pinned to the Python package ecosystem or older behavior.

### Adoption history

The AWS CLI became infrastructure plumbing because it is the AWS-native denominator shared by developers, CI jobs, shell scripts, and operational runbooks. Its adoption tracks both AWS service growth and package-manager culture: Homebrew, Linux distro packages, Chocolatey, Scoop, Nix, and vendor installers all expose an `aws` command that users expect to be available on fresh machines.

AWS announced a v1 maintenance transition in 2024: v1 enters maintenance mode on February 1, 2026, reaches end-of-support on July 31, 2027, and users are directed toward v2 for ongoing feature work. That split is why package collections commonly carry both `awscli` and an explicit v1 package.

### How it is used

Common usage is interactive and scripted: configure credentials with `aws configure`, select profiles with `--profile` or `AWS_PROFILE`, call service subcommands such as `aws s3`, `aws ec2`, and `aws sts`, and pipe JSON output through tools like `jq`. The shared config file normally lives at `~/.aws/config`, while long-lived credentials and session material normally live at `~/.aws/credentials`.

The CLI also serves as an authentication substrate for other tools in this batch. awscurl, awslogs, and AWSume all either read the same shared files or help produce/export credentials used by the AWS CLI and SDK credential chain.

### Why package nerds care

AWS CLI is a packaging stress test: it has high release velocity, a large generated command surface, platform-specific installers, shell completion, and a v1/v2 compatibility split. Package maintainers care about it because many downstream tools assume the `aws` executable exists, while users care about whether their package manager delivers v2, legacy v1, or both.

It is also one of the clearest examples of cloud vendors turning APIs into package-manager-distributed command-line infrastructure. Installing `awscli` is often the first step in bootstrapping an AWS workstation or CI image.

### Timeline

- 2012: Public GitHub repository `aws/aws-cli` created.
- 2013: AWS CLI 1.0.0 tag cut.
- 2018: AWS CLI v2 developer preview tag `2.0.0dev0` published.
- 2020: AWS CLI v2 2.0.0 tag cut.
- 2026: AWS CLI v1 scheduled to enter maintenance mode on February 1.
- 2027: AWS CLI v1 scheduled to reach end-of-support on July 31.

### Related projects

- AWS CLI v1 is the legacy major line packaged by Homebrew as `awscli@1`.
- AWS SDK for Python (Boto3/Botocore) supplies the Python AWS client and model ecosystem that underpins much of the v1-era command generation.
- awscurl, awslogs, and AWSume are companion command-line tools that reuse AWS credentials, profiles, or service semantics.

### Sources

- <https://api.github.com/repos/aws/aws-cli>
- <https://api.github.com/repos/aws/aws-cli/git/tags/b824720aa0c766c39ee2c6039f25e9425ddf4498>
- <https://api.github.com/repos/aws/aws-cli/git/tags/ec5534a7194f2def0b80dcf9291ab1d78fcf11d7>
- <https://api.github.com/repos/aws/aws-cli/git/tags/ed249f078fc585d3ed4878bb2535697622091b4a>
- <https://aws.amazon.com/blogs/developer/cli-v1-maintenance-mode-announcement/>
- <https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html>
- <https://github.com/aws/aws-cli>


## Security Notes

No matching local secret-handling manifest was found for awscli. Nucleus package metadata is still published here so future coverage has a stable package URL.

- **Approval gate rules:** 8


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.aws/config
- Windows: %USERPROFILE%\.aws\config

## Credential files

- Unix: ~/.aws/credentials
- Windows: %USERPROFILE%\.aws\credentials
## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** awscli
- **Aliases:** awscli@2
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Debian apt - awscli - 2.23.6-1: normalized package name match | Debian stable package indexes: awscli from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Unified command line interface to Amazon Web Services | https://github.com/aws/aws-cli
- Nix - awscli: normalized package name match | nixpkgs package indexes: pkgs/by-name/aw/awscli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- dnf - awscli2 - 2.34.29-2.fc45: normalized package name match | Fedora Rawhide package metadata: awscli2 from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Universal Command Line Environment for AWS, version 2 | https://github.com/aws/aws-cli/tree/v2
- zypper - aws-cli - 1.44.51-1.1: normalized package name match | openSUSE Tumbleweed package metadata: aws-cli from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Amazon Web Services Command Line Interface | https://github.com/aws/aws-cli
- Chocolatey - awscli: normalized package name match | Chocolatey community package catalog: awscli from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','autodesk-fusion360'
- dnf - aws - 26.0.0-4.fc45: installed executable or alias match | Fedora Rawhide package metadata: aws from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | The Ada Web Server | https://github.com/AdaCore/aws
- dnf - aws-devel - 26.0.0-4.fc45: installed executable or alias match | Fedora Rawhide package metadata: aws-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Development files for the Ada Web Server | https://github.com/AdaCore/aws
- dnf - aws-doc - 26.0.0-4.fc45: installed executable or alias match | Fedora Rawhide package metadata: aws-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Documentation for the Ada Web Server | https://github.com/AdaCore/aws
- dnf - aws-tools - 26.0.0-4.fc45: installed executable or alias match | Fedora Rawhide package metadata: aws-tools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Tools for the Ada Web Server | https://github.com/AdaCore/aws
- Scoop - main/aws: installed executable or alias match | Scoop official bucket manifest trees: bucket/aws.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Related links

- [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Secret-risk packages](https://www.automicvault.com/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew.
- [cmake](https://www.automicvault.com/pkg/brew/cmake/) - Build dependency declared by Homebrew.
- [iamy](https://www.automicvault.com/pkg/brew/iamy/) - Popular package that depends on this formula.
- [rosa-cli](https://www.automicvault.com/pkg/brew/rosa-cli/) - Popular package that depends on this formula.
- [awscli@1](https://www.automicvault.com/pkg/brew/awscli-1/) - Package name indicates the same formula family.
- [amazon-ecs-cli](https://www.automicvault.com/pkg/brew/amazon-ecs-cli/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-amplify](https://www.automicvault.com/pkg/brew/aws-amplify/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-cdk](https://www.automicvault.com/pkg/brew/aws-cdk/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-console](https://www.automicvault.com/pkg/brew/aws-console/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-elasticbeanstalk](https://www.automicvault.com/pkg/brew/aws-elasticbeanstalk/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-es-proxy](https://www.automicvault.com/pkg/brew/aws-es-proxy/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-google-auth](https://www.automicvault.com/pkg/brew/aws-google-auth/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [aws-iam-authenticator](https://www.automicvault.com/pkg/brew/aws-iam-authenticator/) - Shares av.db curated category or tags: aws, cli, cloud-infrastructure.
- [awscli-local](https://www.automicvault.com/pkg/brew/awscli-local/) - Both packages touch the same language runtime or ecosystem. Shared terms: aws, awscli, cli, cloud, cloud-infrastructure.
- [aws-sam-cli](https://www.automicvault.com/pkg/brew/aws-sam-cli/) - Both packages touch the same language runtime or ecosystem. Shared terms: aws, cli, cloud, cloud-infrastructure, infrastructure.

## Combined YAML source

View the package source record on GitHub. [combined/awscli.yml](https://github.com/automic-vault/db/blob/main/combined/awscli.yml)


## Sources

- Nucleus package database
- approval-gate seed metadata
- package-page enrichment
- curated configuration and credential file locations
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
- curated agent safety answer
