pkg.soopen package index

brew / rang 843

Installer aws-iam-authenticator avec Homebrew, chocolatey, MacPorts, Nix, scoop, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de aws-iam-authenticator pour les workflows d'agents IA.

Commande d'installationNotes de sécurité

sécurité des agents

Réponse sur la sécurité des agents

aws-iam-authenticator bridges AWS credentials into Kubernetes authentication.

Accès aux identifiants

Reads AWS credentials, kubeconfig, and IAM identity context.

Modification distante

Authentication is not mutation, but it enables subsequent Kubernetes writes.

Risque de publication ou d'artéfact

Can unlock cluster access used by deployment tools.

Contrôle recommandé

Gate credential use and cluster context switching.

Conseils d'utilisation par les agents

Allow identity inspection; require approval before enabling cluster access for mutating tools.

installation

Commandes d'installation supplémentaires

macOS

Homebrewvérifié · 100%
brew install aws-iam-authenticator

local Homebrew formula metadata

MacPortsvérifié · 94%
sudo port install aws-iam-authenticator

MacPorts ports tree · sysutils/aws-iam-authenticator/Portfile · Source: api.github.com

Linux

Nixvérifié · 92%
nix profile install nixpkgs#aws-iam-authenticator

nixpkgs package indexes · pkgs/by-name/aw/aws-iam-authenticator/package.nix · Source: api.github.com

Windows

Chocolateyvérifié · 92%
choco install aws-iam-authenticator

Chocolatey community package catalog · aws-iam-authenticator · Source: community.chocolatey.org

Scoopvérifié · 92%
scoop install main/aws-iam-authenticator

Scoop official bucket manifest trees · bucket/aws-iam-authenticator.json · Source: api.github.com

Windows Package Managervérifié · 92%
winget install --id Kubernetes.aws-iam-authenticator -e

Windows Package Manager source index · Kubernetes.aws-iam-authenticator · Source: cdn.winget.microsoft.com

aperçu

Résumé du paquet

Use AWS IAM credentials to authenticate to Kubernetes

Commandes et alias

  • aws-iam-authenticator

historique

Historique du projet et usages

AWS IAM Authenticator for Kubernetes is a Kubernetes authentication bridge that lets AWS IAM identities authenticate to Kubernetes clusters. It uses AWS STS GetCallerIdentity-signed tokens on the client side and maps IAM users, roles, or accounts to Kubernetes users and groups on the server side.

Historique du projet

The repository README says the initial work was driven by Heptio and that the project receives community contributions while being maintained by Heptio and Amazon EKS OSS Engineers. The tool arose from the need to avoid a separate Kubernetes credential system for clusters whose administrators already manage AWS IAM credentials.

AWS's Open Source Blog described the 2018 community project as initially driven by Heptio, used by the Amazon EKS open source team as a starting point for mapping AWS IAM to Kubernetes RBAC, and donated to the Kubernetes Cloud Provider SIG. A 2019 AWS post described the renamed AWS IAM Authenticator and kops integration after the earlier Heptio Authenticator work.

Historique d'adoption

The authenticator became important in the early Amazon EKS and Kubernetes-on-AWS ecosystem because it let kubectl authenticate through IAM rather than long-lived Kubernetes client certificates. AWS blog posts show it used for EKS, kops, LDAP/AD federation patterns, and self-managed Kubernetes clusters on AWS.

The official GitHub page shows a large project footprint for this batch's peer group, with roughly 2.3k stars, hundreds of forks, and more than 1,000 commits. Homebrew analytics showed 3,013 installs in 30 days, 9,650 in 90 days, and 35,664 in 365 days at the time of this batch, making it the dominant package in this batch by package-manager usage.

Modes d'utilisation

Cluster administrators run the server as a DaemonSet or integrate it with kops, configure the API server to use its token webhook kubeconfig, and define role/user mappings through a mounted config file, an EKS-style ConfigMap, or IAMIdentityMapping custom resources. Users then configure kubectl exec authentication to call `aws-iam-authenticator token` for a cluster ID.

The client token is based on a signed STS GetCallerIdentity request with the cluster ID in the request context. The README documents AWS profile selection through kubeconfig exec environment variables and maps roles/users/accounts to Kubernetes usernames and groups for RBAC.

Pourquoi les passionnés de paquets s'y intéressent

For package nerds, aws-iam-authenticator is a canonical Kubernetes cloud-provider sidecar CLI: a single binary that lives at the boundary of kubectl exec plugins, AWS STS signing, kops, EKS, and Kubernetes SIG ownership. It is also a useful marker of the transition from early Heptio/EKS bootstrap tooling to more integrated Kubernetes authentication workflows.

Chronologie

  • 2018: AWS Open Source Blog describes aws-iam-authenticator as an initially Heptio-driven community project used by the Amazon EKS open source team.
  • 2019: AWS posts updated kops deployment guidance for AWS IAM Authenticator after the Heptio Authenticator donation to Cloud Provider SIG.
  • 2026: Homebrew formula metadata packages aws-iam-authenticator v0.7.18.

Related projects

  • Heptio Authenticator: the earlier name/history described by AWS blog posts.
  • Amazon EKS: a major adoption driver for IAM-backed Kubernetes authentication.
  • kops: Kubernetes-on-AWS cluster tooling with integration guidance for the authenticator.

posture de sécurité

Niveau de risque : orange

infrastructure mutation or orchestration signal.

Classificateur de risque

risque orange · confiance moyen · infrastructure

Pourquoi

  • infrastructure mutation or orchestration signal

Signaux

  • text:kubernetes

Comportement d'installation

  • Aucune métadonnée de bottle Homebrew n’a été enregistrée.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/aws-iam-authenticator/config.yaml/etc/kubernetes/aws-iam-authenticator/kubeconfig.yaml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.aws/credentials~/.aws/config
Windows
%USERPROFILE%\.aws\credentials%USERPROFILE%\.aws\config

exécutables

Exécutables installés

CommandeTypeExpositionNote
aws-iam-authenticatorexécutableexécutable indexéDécouvert depuis l'index local des exécutables.

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-08-03
version du gestionnaire0.7.18
gestionnaire mis à jour2026-07-26
données localesinconnu
amontnon disponible
dernière version détectéenon détecté
  • OKAucun avertissement de fraîcheur n'a été généré.

métadonnées d'installation

Métadonnées du paquet

Clé du paquetbrew:aws-iam-authenticator
Version0.7.18
Gestionnaire de paquetsHomebrew
Page d'accueilhttps://github.com/kubernetes-sigs/aws-iam-authenticator
Dépôthttps://github.com/kubernetes-sigs/aws-iam-authenticator
Dernière mise à jour2026-07-26T13:19:53+02:00
Pulseupdated
Bouteillenon enregistré
Serviceaucun déclaré

correspondances dans les bases sources

Autres enregistrements de gestionnaires de paquets

Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.

Nix95%

aws-iam-authenticator

nix profile install nixpkgs#aws-iam-authenticator
  • normalized package name match
  • Correspondance par : Aws Iam Authenticator
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/aw/aws-iam-authenticator/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

aws-iam-authenticator

sudo port install aws-iam-authenticator
  • normalized package name match
  • Correspondance par : Aws Iam Authenticator
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/aws-iam-authenticator/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

aws-iam-authenticator

choco install aws-iam-authenticator
  • normalized package name match
  • Correspondance par : Aws Iam Authenticator
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: aws-iam-authenticator from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','authy-desktop'
Scoop95%

main/aws-iam-authenticator

scoop install main/aws-iam-authenticator
  • normalized package name match
  • Correspondance par : Aws Iam Authenticator
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/aws-iam-authenticator.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

Kubernetes.aws-iam-authenticator

winget install --id Kubernetes.aws-iam-authenticator -e
  • normalized package name match
  • Correspondance par : Aws Iam Authenticator
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Kubernetes.aws-iam-authenticator from https://cdn.winget.microsoft.com/cache/source.msix

graphe de paquets

Les liens viennent du graphe local de relations entre paquets, des suppléments, des dépendances, des correspondances d'écosystèmes et de l'appartenance aux hubs.

Guides de sécurité des agents

piste source

Généré depuis les données du dépôt

Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.

Sources utilisées

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation