# Install gimme-aws-creds with Homebrew, Nix CLI to retrieve AWS credentials from Okta. Version 2.8.2 via Homebrew; verified 2026-06-16. ## Install ```sh sudo av install brew:gimme-aws-creds ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install gimme-aws-creds ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#gimme-aws-creds ``` Evidence: nixpkgs package indexes: pkgs/by-name/gi/gimme-aws-creds/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:gimme-aws-creds - **Package manager:** Homebrew - **Package manager page:** - **Version:** 2.8.2 - **Source summary:** CLI to retrieve AWS credentials from Okta - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-06-16T11:20:52Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - gimme-aws-creds (cli) - gimme-aws-creds-autocomplete.sh (cli) - gimme-aws-creds.cmd (cli) - gimme-aws-creds (alias) - gimme-aws-creds-autocomplete.sh (alias) - gimme-aws-creds.cmd (alias) ## Dependencies - certifi - cryptography - libyaml - python@3.14 ## Uses from macOS - libffi ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 2.8.2 - Package-manager updated: 2026-06-16 - Local data: ok - Upstream repository: https://github.com/Nike-Inc/gimme-aws-creds - info: No cached GitHub release or tag data was available. ## Project history and usage gimme-aws-creds is a command-line tool from Nike for obtaining short-lived AWS credentials through Okta-backed SAML authentication. ### Project history The GitHub repository was created in March 2017, and version 1.0.0 was released in October 2017. The README credits earlier work in okta_aws_login, noting that gimme-aws-creds reused some MIT-licensed code while addressing stale maintenance and multi-application scaling limitations. Over time the tool expanded from a friendly Okta-to-AWS credential helper into a broader cloud credential bridge. Its documentation covers Okta Identity Engine, browser-based device authorization, MFA factor handling, configurable profiles, optional gimme-creds-lambda proxying, and Alibaba Cloud RAM credentials using the same Okta authentication flow. ### Adoption history The package fits the enterprise CLI niche created by federated AWS access: engineers need temporary AWS profiles, but organizations often require Okta MFA and SAML rather than long-lived IAM user keys. Distribution through PyPI, Homebrew, and Nix made it accessible to both Python and macOS-oriented workstation setups. ### How it is used Practitioners install the tool, run its configuration action to store Okta organization, application, role, and profile preferences, then run gimme-aws-creds to write temporary credentials to the AWS shared credentials file or to stdout. Teams use named profiles and environment overrides to switch accounts, roles, durations, MFA behavior, and cloud-provider mode. ### Why package nerds care gimme-aws-creds is package-manager-interesting because it lives at the boundary between local developer ergonomics and enterprise identity policy. Small packaging details, Python version support, shell completion, and credential-file paths directly affect whether engineers can enter cloud shells without manual SAML copy-and-paste work. ### Timeline - 2017: Repository created. - 2017: Version 1.0.0 released. - 2018: 1.1 series releases continued profile and compatibility work. - 2020s: Documentation grew around Okta Identity Engine, device authorization, Python 3.10+, Homebrew, Nix, Docker, and Alibaba Cloud support. ### Related projects - The README names okta_aws_login as an ancestor and lists okta-aws-cli and okta-aws-cli-assume-role as related projects. ### Sources - - - - ## Security Notes No matching local secret-handling manifest was found for gimme-aws-creds. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.okta_aws_login_config ## Credential files - Unix: ~/.aws/credentials, ~/.aliyun/config.json ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** gimme-aws-creds - **Version Scheme:** 0 - **Revision:** 14 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - gimme-aws-creds: normalized package name match | nixpkgs package indexes: pkgs/by-name/gi/gimme-aws-creds/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [python@3.14](https://www.automicvault.com/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [gif2png](https://www.automicvault.com/pkg/brew/gif2png/) - Shares av.db curated category or tags: cli, gif, image, media. - [gifcap](https://www.automicvault.com/pkg/brew/gifcap/) - Shares av.db curated category or tags: cli, gif, image, media. - [gifsicle](https://www.automicvault.com/pkg/brew/gifsicle/) - Shares av.db curated category or tags: cli, gif, image, media. - [gifski](https://www.automicvault.com/pkg/brew/gifski/) - Shares av.db curated category or tags: cli, gif, image, media. - [lame](https://www.automicvault.com/pkg/brew/lame/) - Shares av.db curated category or tags: cli, encoder, encoding, media. - [ttygif](https://www.automicvault.com/pkg/brew/ttygif/) - Shares av.db curated category or tags: cli, gif, image, media. - [two-lame](https://www.automicvault.com/pkg/brew/two-lame/) - Shares av.db curated category or tags: cli, encoder, encoding, media. - [catimg](https://www.automicvault.com/pkg/brew/catimg/) - Shares av.db curated category or tags: cli, image, media. - [gallery-dl](https://www.automicvault.com/pkg/brew/gallery-dl/) - Both packages touch the same language runtime or ecosystem. Shared terms: certifi, cli, cryptography, image, libyaml. - [vs-preview](https://www.automicvault.com/pkg/brew/vs-preview/) - Both packages touch the same language runtime or ecosystem. Shared terms: certifi, cli, encoding, libyaml, media. - [animdl](https://www.automicvault.com/pkg/brew/animdl/) - Both packages touch the same language runtime or ecosystem. Shared terms: certifi, cli, libyaml, media, python. ## Combined YAML source View the package source record on GitHub. [combined/gimme-aws-creds.yml](https://github.com/automic-vault/db/blob/main/combined/gimme-aws-creds.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph