Download
AWS Vault is a tool to securely store and access AWS credentials in a development environment. AWS Vault stores IAM credentials in your operating system's secure keystore and then generates temporary credentials from those to expose to your shell and applications. It's designed to be complementary to the AWS CLI tools, and is aware of your profiles and configuration in ~/.aws/config. By default, there is a dedicated Keychain for AWS credentials and Keychain prompts you when credentials are accessed. Beyond the strong storage-at-rest, aws-vault generates short-lived session-based credentials to expose to sub-processes and it encourages you to use the tool to run other tools, rather than exporting credentials to your environment. This means that rogue node.js packages have a harder time obtaining your credentials, and when they do, are limited to the lifetime of the session.
Features
- It’s a binary and very easy to install and incorporate in your day-to-day usage
- The supported vaulting backends are macOS Keychain, Windows Credential Manager, Secret Service (Gnome Keyring, KWallet)
- KWallet, Pass, and Encrypted file supported
- Uses Amazon's STS service to generate temporary credentials
- AWS Vault then exposes the temporary credentials to the sub-process
- Config, usage, tips and tricks are available in the USAGE.md file
Project Samples
