# Install aws-vault-binary with Homebrew Cask Securely stores and accesses AWS credentials in a development environment. Version 7.2.0 via Homebrew Cask; verified from local package data. Also installable with macports: sudo port install aws-vault. ## Install ```sh sudo av install cask:aws-vault-binary ``` Additional install commands: ### macOS - Homebrew Cask (100%): ```sh brew install --cask aws-vault-binary ``` Evidence: local Homebrew cask metadata ## Package facts - **Package key:** cask:aws-vault-binary - **Package manager:** Homebrew Cask - **Package manager page:** - **Version:** 7.2.0 - **Source summary:** Securely stores and accesses AWS credentials in a development environment - **Homepage:** - **Repository:** - **Source archive:** - **Generated:** 2026-07-25T07:20:51+00:00 ## Executables - aws-vault (binary) - aws-vault (alias) ## Install behavior - Post-install hook: not defined - Bottle: not available ## Freshness - Page generated: 2026-07-25 - Package-manager version: 7.2.0 - Local data: ok - Upstream repository: https://github.com/99designs/aws-vault - info: No package-manager update timestamp was available. - info: No cached GitHub release or tag data was available. ## Project history and usage The `aws-vault-binary` cask packages the original 99designs AWS Vault macOS binary distribution. AWS Vault stores long-term AWS IAM credentials in an operating-system secure store and exposes short-lived STS credentials to commands, shells, browser sessions, or local metadata-style endpoints. ### Project history The original `99designs/aws-vault` repository was created in August 2015, with GitHub releases beginning at v1.0.0 in September 2015. The upstream README links to a 99designs announcement post and describes the tool as complementary to the AWS CLI, aware of profiles in `~/.aws/config`. By 2026 the original README marked the project abandoned and pointed users to the active `ByteNess/aws-vault` fork. The cask, however, still references the 99designs repository and v7.2.0 macOS DMG artifact, so this record reflects the legacy binary distribution rather than the newer Homebrew formula. ### Adoption history AWS Vault became one of the canonical AWS credential helpers in the macOS and Unix developer tooling ecosystem. The original README listed installation through direct releases, Homebrew, MacPorts, Chocolatey, Scoop, Arch, Gentoo, FreeBSD, OpenSUSE, Nix, and asdf, which is unusually broad for a single-purpose credential CLI. The 99designs repository metadata showed thousands of stars and hundreds of forks in June 2026, and the v7.2.0 release assets had large download counts, especially for Linux and Apple Silicon macOS binaries. Homebrew cask analytics still showed active installs for the binary cask even after the original project became legacy. ### How it is used The classic workflow is `aws-vault add profile` to store long-term credentials in the platform vault, then `aws-vault exec profile -- command` or `aws-vault login profile` to obtain temporary AWS credentials or console access. The usage guide also documents credential_process use, MFA session caching, SSO caching, and metadata server modes. Because secrets live in the OS keychain or equivalent backend, `~/.aws/credentials` is not the primary storage location for this package's secrets. ### Why package nerds care This cask is historically significant because it preserves the old signed macOS binary channel after the main formula moved on. It also illustrates a common packaging split: the same tool can exist as a source-built formula and as a binary cask, with different upstreams and maintenance status over time. ### Timeline - 2015-08: Original 99designs/aws-vault repository created. - 2015-09: v1.0.0 GitHub release published. - 2023-03: v7.2.0 published by the 99designs repository. - 2025-05: ByteNess active fork created. - 2026-06: Original README marked 99designs/aws-vault abandoned and pointed to ByteNess/aws-vault. ### Related projects - `ByteNess/aws-vault` is the maintained fork named by the original upstream README. - `aws-sso-cli` uses similar secure keyring ideas but focuses on IAM Identity Center rather than long-term IAM access keys. ### Sources - - - - ## Security Notes No matching local secret-handling manifest was found for aws-vault-binary. Nucleus package metadata is still published here so future coverage has a stable package URL. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.aws/config - Windows: %USERPROFILE%\.aws\config ## Source Database Details - **Source Database:** Homebrew cask API - **Tap:** homebrew/cask - **Full Token:** aws-vault-binary - **Names:** AWS Vault - **Old Tokens:** aws-vault - **Artifacts:** Binary: 1, Target: 1 - **Deprecated:** no - **Disabled:** no ## Other Package-Manager Records - MacPorts - aws-vault: installed executable or alias match | MacPorts ports tree: security/aws-vault/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Nix - aws-vault: installed executable or alias match | nixpkgs package indexes: pkgs/by-name/aw/aws-vault/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman - aws-vault - 7.11.1-1: installed executable or alias match | Arch Linux sync databases: aws-vault from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Vault for securely storing and accessing AWS credentials in development environments | https://github.com/ByteNess/aws-vault - Chocolatey - aws-vault: installed executable or alias match | Chocolatey community package catalog: aws-vault from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','autodesk-fusion360' - Scoop - main/aws-vault: installed executable or alias match | Scoop official bucket manifest trees: bucket/aws-vault.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget - 99designs.aws-vault: installed executable or alias match | Windows Package Manager source index: 99designs.aws-vault from https://cdn.winget.microsoft.com/cache/source.msix - winget - ByteNess.AWSVault: installed executable or alias match | Windows Package Manager source index: ByteNess.AWSVault from https://cdn.winget.microsoft.com/cache/source.msix ## Related links - [Homebrew Cask packages](https://www.automicvault.com/pkg/homebrew-cask-packages/) - Generated from Homebrew Cask package-manager metadata. - [Homebrew Cask binaries](https://www.automicvault.com/pkg/homebrew-cask-binaries/) - Cask artifact metadata includes a binary. ## Combined YAML source View the package source record on GitHub. [combined/aws-vault-binary.yml](https://github.com/automic-vault/db/blob/main/combined/aws-vault-binary.yml) ## Sources - Nucleus package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph