macOS
brew install aws-google-authprovider-native install command
brew / Rang 3601
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für aws-google-auth in AI-Agent-Workflows.
Installation
brew install aws-google-authprovider-native install command
Überblick
Acquire AWS credentials using Google Apps
Verlauf
aws-google-auth is a Python command-line tool for acquiring temporary AWS STS credentials using Google Apps / Google Workspace SAML SSO as the identity provider. It targets organizations that wired Google SAML into AWS before newer AWS-native SSO and IAM Identity Center workflows became common.
The CEVO Australia repository presents the tool as a way to acquire AWS temporary credentials through Google Apps federation. Its README covers the Google SAML identity-provider setup, the AWS service-provider identifiers needed by the command, installation through pip or Docker, and command-line flags for region, profile, role ARN, U2F, keyring use, and diagnostic output.
The README points to PyPI and Docker Hub distribution paths, and the GitHub page shows a Python project with a public release line through 0.0.38. Homebrew analytics showed 73 installs in 30 days, 290 in 90 days, and 1,204 in 365 days at the time of this batch, indicating a lingering audience among teams with older Google SAML AWS login setups.
Users provide Google username, IdP ID, service-provider ID, AWS region, profile, and optionally a role ARN. The tool prompts for password and MFA, assumes an AWS role, and writes or reuses profile data; its README says profile credentials and related IdP/SP details are stored through AWS profiles in the AWS config file.
The package is historically interesting because it bridges consumer-style browser SSO and Unix CLI credential files. It also documents borrowing credential injection ideas from aws-adfs and inspiration from keyme, which places it in the family of pre-IAM-Identity-Center AWS federation helpers.
Sicherheitslage
Für aws-google-auth wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.aws/configCredential-bearing paths to review before unattended agent runs.
~/.aws/credentialsExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
aws-google-auth | Executable | indexiertes Executable | Aus dem lokalen Executable-Index erkannt. |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | brew:aws-google-auth |
|---|---|
| Version | 0.0.38 |
| Paketmanager | Homebrew |
| Homepage | https://github.com/cevoaustralia/aws-google-auth |
| Repository | https://github.com/cevoaustralia/aws-google-auth |
| Zuletzt aktualisiert | 2026-07-10T20:43:27Z |
| Pulse | updated |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Quellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.