pkg.sopackage field notes

brew / Approval Gates / Rang 12

awscli mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für awscli in AI-Agent-Workflows.

Agent-Sicherheit

Antwort zur Agent-Sicherheit

awscli is a cloud-control CLI for AWS accounts, so agent runs should treat it as high-authority infrastructure access.

Credential-Zugriff

Reads AWS profiles, SSO cache, credential files, and environment credentials.

Änderungen an Remote-Zustand

Can create, delete, and reconfigure AWS resources across many services.

Publish-/Artefakt-Risiko

Can upload artifacts, deploy functions, and change release infrastructure.

Empfohlene Kontrolle

Use protected AWS credential helpers and approval gates for mutating commands.

Hinweise für Agent-Nutzung

Permit read-only inspection by default; require human approval for writes, deletes, credential export, and deploys.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install awscli

provider-native install command

Überblick

Paketzusammenfassung

Official Amazon AWS command-line interface

Befehle und Aliase

  • aws
  • aws_completer

Verlauf

Projektgeschichte und Nutzung

AWS CLI is Amazon Web Services' official command-line interface, packaging AWS service APIs behind a single `aws` executable for shell use, automation, and repeatable cloud operations. For package-manager users, the modern `awscli` formula tracks AWS CLI v2, while the legacy v1 line is packaged separately as `awscli@1`.

Projektgeschichte

The public `aws/aws-cli` repository was created in November 2012 and the 1.0.0 tag was cut in September 2013. Version 1 established the familiar Python-based command structure, shared AWS config and credentials files, profiles, output formats, and generated service commands that made AWS automation feel like a regular Unix tool.

AWS CLI v2 was previewed publicly with the `2.0.0dev0` tag in November 2018 and tagged 2.0.0 in February 2020. The v2 package became the preferred install target for the main AWS CLI docs and Homebrew formula, while v1 continued as a compatibility line for workflows pinned to the Python package ecosystem or older behavior.

Adoptionsgeschichte

The AWS CLI became infrastructure plumbing because it is the AWS-native denominator shared by developers, CI jobs, shell scripts, and operational runbooks. Its adoption tracks both AWS service growth and package-manager culture: Homebrew, Linux distro packages, Chocolatey, Scoop, Nix, and vendor installers all expose an `aws` command that users expect to be available on fresh machines.

AWS announced a v1 maintenance transition in 2024: v1 enters maintenance mode on February 1, 2026, reaches end-of-support on July 31, 2027, and users are directed toward v2 for ongoing feature work. That split is why package collections commonly carry both `awscli` and an explicit v1 package.

Wie es verwendet wird

Common usage is interactive and scripted: configure credentials with `aws configure`, select profiles with `--profile` or `AWS_PROFILE`, call service subcommands such as `aws s3`, `aws ec2`, and `aws sts`, and pipe JSON output through tools like `jq`. The shared config file normally lives at `~/.aws/config`, while long-lived credentials and session material normally live at `~/.aws/credentials`.

The CLI also serves as an authentication substrate for other tools in this batch. awscurl, awslogs, and AWSume all either read the same shared files or help produce/export credentials used by the AWS CLI and SDK credential chain.

Warum Paket-Nerds sich dafür interessieren

AWS CLI is a packaging stress test: it has high release velocity, a large generated command surface, platform-specific installers, shell completion, and a v1/v2 compatibility split. Package maintainers care about it because many downstream tools assume the `aws` executable exists, while users care about whether their package manager delivers v2, legacy v1, or both.

It is also one of the clearest examples of cloud vendors turning APIs into package-manager-distributed command-line infrastructure. Installing `awscli` is often the first step in bootstrapping an AWS workstation or CI image.

Zeitleiste

  • 2012: Public GitHub repository `aws/aws-cli` created.
  • 2013: AWS CLI 1.0.0 tag cut.
  • 2018: AWS CLI v2 developer preview tag `2.0.0dev0` published.
  • 2020: AWS CLI v2 2.0.0 tag cut.
  • 2026: AWS CLI v1 scheduled to enter maintenance mode on February 1.
  • 2027: AWS CLI v1 scheduled to reach end-of-support on July 31.

Related projects

  • AWS CLI v1 is the legacy major line packaged by Homebrew as `awscli@1`.
  • AWS SDK for Python (Boto3/Botocore) supplies the Python AWS client and model ecosystem that underpins much of the v1-era command generation.
  • awscurl, awslogs, and AWSume are companion command-line tools that reuse AWS credentials, profiles, or service semantics.

Approval Gates

Metadaten für menschliche Prüfung riskanter Befehle

Der lokale Approval-Gate-Seed enthält 8 Regeln für awscli. Abgedeckte Einstiegspunkte: aws. Schweregrade: kritisch, hoch. Abdeckung: partial, geprüft am 2026-05-21.

Beispiele für gated Aktionen

  • Export AWS credentials to stdout or process environment formats.
  • Assume an AWS role and receive temporary credentials.
  • Read and print a secret from AWS Secrets Manager.
  • Delete S3 objects or buckets.
  • Recursively mutate S3 objects.
  • Create, update, or delete IAM access keys.
  • Create, update, deploy, or delete CloudFormation stacks.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.aws/config
Windows
%USERPROFILE%\.aws\config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.aws/credentials
Windows
%USERPROFILE%\.aws\credentials

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
awsExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.
aws_completerExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03
Manager-Version2.36.14
Manager aktualisiert2026-07-31
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:awscli
Version2.36.14
PaketmanagerHomebrew
Homepagehttps://aws.amazon.com/cli/
Repositoryhttps://github.com/aws/aws-cli
Zuletzt aktualisiert2026-07-31T21:30:16Z
Pulseupdated
Bottlenicht erfasst
Dienstkeiner deklariert

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Nucleus package database
  • approval-gate seed metadata
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation