pkg.soopen package index

brew / rank 728

Install aws-vault with Homebrew, chocolatey, MacPorts, Nix, pacman, scoop, winget

Securely store and access AWS credentials in development environments. Version 7.13.2 via Homebrew; verified 2026-07-30. Also installable with nix: nix profile install nixpkgs#aws-vault.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install aws-vault

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install aws-vault

MacPorts ports tree · security/aws-vault/Portfile · source: api.github.com

Linux

Nixverified · 92%
nix profile install nixpkgs#aws-vault

nixpkgs package indexes · pkgs/by-name/aw/aws-vault/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S aws-vault

Arch Linux sync databases · aws-vault · source: geo.mirror.pkgbuild.com

Windows

Chocolateyverified · 92%
choco install aws-vault

Chocolatey community package catalog · aws-vault · source: community.chocolatey.org

Scoopverified · 92%
scoop install main/aws-vault

Scoop official bucket manifest trees · bucket/aws-vault.json · source: api.github.com

Windows Package Managerverified · 92%
winget install --id 99designs.aws-vault -e

Windows Package Manager source index · 99designs.aws-vault · source: cdn.winget.microsoft.com

overview

Package summary

Securely store and access AWS credentials in development environments

Commands and aliases

  • aws-vault

history

Project history and usage

AWS Vault is a long-running AWS credential helper that stores IAM credentials in a secure backend and generates temporary credentials for local development. The Homebrew formula now tracks the maintained ByteNess fork, whose README states that it continues the abandoned 99designs project.

Project history

The original project started at 99designs in 2015 and quickly established the `aws-vault add` plus `aws-vault exec` workflow for keeping long-term AWS keys out of plaintext shell environments. Its documentation made `~/.aws/config` the coordination point while storing secrets in platform facilities such as macOS Keychain, Windows Credential Manager, Secret Service, KWallet, pass, or encrypted files.

In May 2025, the ByteNess fork was created as an active continuation. By June 2026 the original 99designs README warned that the old project was abandoned, while the ByteNess README called itself a maintained fork and documented newer backend support such as Windows Hello, keyctl, Passage, and 1Password options.

Adoption history

AWS Vault has broad package-manager reach: the original README listed Homebrew, MacPorts, Chocolatey, Scoop, Arch, Gentoo, FreeBSD, OpenSUSE, Nix, and asdf, while the ByteNess README keeps Homebrew, Chocolatey, and Nix as prominent install paths. Homebrew analytics showed several thousand 30-day formula installs in June 2026.

Its adoption is tied to security posture in developer AWS accounts: teams can store persistent IAM keys in a local secure backend, require MFA, and hand commands only short-lived STS credentials. That pattern made it useful for Terraform, SDKs, CI-adjacent local scripts, and desktop apps that need AWS credentials without placing static keys in environment variables.

How it is used

Common usage is `aws-vault add <profile>` followed by `aws-vault exec <profile> -- <command>`, `aws-vault login <profile>`, or `aws-vault export` through `credential_process`. The usage guide describes executor mode, master-credential-vault mode, MFA session cache mode, and caching of alternative credential sources such as SSO and web identity.

The maintained fork also documents backend selection and migration between backends, which matters for users moving between macOS Keychain, Linux desktop secret stores, 1Password, and encrypted-file fallback.

Why package nerds care

AWS Vault matters to package nerds because it is both a security tool and a packaging case study: a mature, heavily packaged CLI moved from an abandoned original upstream to an active fork while retaining the same command name and ecosystem expectations. Homebrew formula metadata now points at ByteNess release tags rather than the older 99designs releases.

Timeline

  • 2015-08: Original 99designs/aws-vault repository created.
  • 2015-09: v1.0.0 GitHub release published by 99designs/aws-vault.
  • 2023-03: 99designs/aws-vault v7.2.0 published.
  • 2025-05: ByteNess/aws-vault repository created as the maintained fork.
  • 2026-06: ByteNess v7.12.4 published; Homebrew formula tracked v7.12.4.

Related projects

  • `99designs/aws-vault` is the original upstream and remains the source for the legacy cask.
  • `aws-sso-cli`, `aws-sso-util`, and `aws2-wrap` cover adjacent IAM Identity Center workflows that became more important after AWS CLI v2.

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for aws-vault. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.aws/config
Windows
%USERPROFILE%\.aws\config

executables

Installed executables

CommandKindExposureNote
aws-vaultcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-04
manager version7.13.2
manager updated2026-07-30
local dataok
upstreamcurrent
latest detectedv7.13.2

https://github.com/ByteNess/aws-vault

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:aws-vault
Version7.13.2
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/aws-vault
Homepagehttps://github.com/ByteNess/aws-vault
Repositoryhttps://github.com/ByteNess/aws-vault
LicenseMIT
Source archivehttps://github.com/ByteNess/aws-vault/archive/refs/tags/v7.13.2.tar.gz
Last updated2026-07-30T15:04:00Z
Pulseupdated
Build dependenciesgo
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameaws-vault
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

aws-vault

nix profile install nixpkgs#aws-vault
  • normalized package name match
  • Matched by: Aws Vault
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/aw/aws-vault/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

aws-vault 7.13.0-1

Vault for securely storing and accessing AWS credentials in development environments

https://github.com/ByteNess/aws-vault

sudo pacman -S aws-vault
  • License: MIT
  • Architecture: x86_64
  • 1 dependencies
  • 2 optional deps
  • normalized package name match
  • Matched by: Aws Vault
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: aws-vault from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

aws-vault

sudo port install aws-vault
  • normalized package name match
  • Matched by: Aws Vault
MacPorts ports tree · api.github.com · MacPorts ports tree: security/aws-vault/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

aws-vault

choco install aws-vault
  • normalized package name match
  • Matched by: Aws Vault
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: aws-vault from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','authy-desktop'
Scoop95%

main/aws-vault

scoop install main/aws-vault
  • normalized package name match
  • Matched by: Aws Vault
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/aws-vault.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

99designs.aws-vault

winget install --id 99designs.aws-vault -e
  • normalized package name match
  • Matched by: Aws Vault
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: 99designs.aws-vault from https://cdn.winget.microsoft.com/cache/source.msix
winget95%

ByteNess.AWSVault

winget install --id ByteNess.AWSVault -e
  • normalized package name match
  • Matched by: Aws Vault
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: ByteNess.AWSVault from https://cdn.winget.microsoft.com/cache/source.msix

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • goBuild dependency declared by Homebrew.

Same workflow

  • rolesanywhere-credential-helperShares pkgdb curated category or tags: aws, cli, credentials, security.
  • aws-keychainShares pkgdb curated category or tags: aws, cli, credentials, security.
  • saml2awsShares pkgdb curated category or tags: aws, cli, security, sts.
  • okta-aws-cliShares pkgdb curated category or tags: aws, cli, security, sts.
  • grantedShares pkgdb curated category or tags: aws, cli, credentials, security.
  • okta-awscliShares pkgdb curated category or tags: aws, cli, mfa, security.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation