pkg.sopackage field notes

brew / approval gates / rank 12

Install awscli with Homebrew

Official Amazon AWS command-line interface. Version 2.36.14 via Homebrew; verified 2026-07-31.

agent safety

Agent safety answer

awscli is a cloud-control CLI for AWS accounts, so agent runs should treat it as high-authority infrastructure access.

Credential access

Reads AWS profiles, SSO cache, credential files, and environment credentials.

Remote mutation

Can create, delete, and reconfigure AWS resources across many services.

Publish/artifact risk

Can upload artifacts, deploy functions, and change release infrastructure.

Recommended control

Use protected AWS credential helpers and approval gates for mutating commands.

Agent-use guidance

Permit read-only inspection by default; require human approval for writes, deletes, credential export, and deploys.

install

Additional install commands

macOS

Homebrewverified ยท 100%
brew install awscli

provider-native install command

overview

Package summary

Official Amazon AWS command-line interface

Commands and aliases

  • aws
  • aws_completer

history

Project history and usage

AWS CLI is Amazon Web Services' official command-line interface, packaging AWS service APIs behind a single `aws` executable for shell use, automation, and repeatable cloud operations. For package-manager users, the modern `awscli` formula tracks AWS CLI v2, while the legacy v1 line is packaged separately as `awscli@1`.

Project history

The public `aws/aws-cli` repository was created in November 2012 and the 1.0.0 tag was cut in September 2013. Version 1 established the familiar Python-based command structure, shared AWS config and credentials files, profiles, output formats, and generated service commands that made AWS automation feel like a regular Unix tool.

AWS CLI v2 was previewed publicly with the `2.0.0dev0` tag in November 2018 and tagged 2.0.0 in February 2020. The v2 package became the preferred install target for the main AWS CLI docs and Homebrew formula, while v1 continued as a compatibility line for workflows pinned to the Python package ecosystem or older behavior.

Adoption history

The AWS CLI became infrastructure plumbing because it is the AWS-native denominator shared by developers, CI jobs, shell scripts, and operational runbooks. Its adoption tracks both AWS service growth and package-manager culture: Homebrew, Linux distro packages, Chocolatey, Scoop, Nix, and vendor installers all expose an `aws` command that users expect to be available on fresh machines.

AWS announced a v1 maintenance transition in 2024: v1 enters maintenance mode on February 1, 2026, reaches end-of-support on July 31, 2027, and users are directed toward v2 for ongoing feature work. That split is why package collections commonly carry both `awscli` and an explicit v1 package.

How it is used

Common usage is interactive and scripted: configure credentials with `aws configure`, select profiles with `--profile` or `AWS_PROFILE`, call service subcommands such as `aws s3`, `aws ec2`, and `aws sts`, and pipe JSON output through tools like `jq`. The shared config file normally lives at `~/.aws/config`, while long-lived credentials and session material normally live at `~/.aws/credentials`.

The CLI also serves as an authentication substrate for other tools in this batch. awscurl, awslogs, and AWSume all either read the same shared files or help produce/export credentials used by the AWS CLI and SDK credential chain.

Why package nerds care

AWS CLI is a packaging stress test: it has high release velocity, a large generated command surface, platform-specific installers, shell completion, and a v1/v2 compatibility split. Package maintainers care about it because many downstream tools assume the `aws` executable exists, while users care about whether their package manager delivers v2, legacy v1, or both.

It is also one of the clearest examples of cloud vendors turning APIs into package-manager-distributed command-line infrastructure. Installing `awscli` is often the first step in bootstrapping an AWS workstation or CI image.

Timeline

  • 2012: Public GitHub repository `aws/aws-cli` created.
  • 2013: AWS CLI 1.0.0 tag cut.
  • 2018: AWS CLI v2 developer preview tag `2.0.0dev0` published.
  • 2020: AWS CLI v2 2.0.0 tag cut.
  • 2026: AWS CLI v1 scheduled to enter maintenance mode on February 1.
  • 2027: AWS CLI v1 scheduled to reach end-of-support on July 31.

Related projects

  • AWS CLI v1 is the legacy major line packaged by Homebrew as `awscli@1`.
  • AWS SDK for Python (Boto3/Botocore) supplies the Python AWS client and model ecosystem that underpins much of the v1-era command generation.
  • awscurl, awslogs, and AWSume are companion command-line tools that reuse AWS credentials, profiles, or service semantics.

approval gates

Human review metadata for risky commands

The local approval-gate seed includes 8 rules for awscli. Covered entrypoints: aws. Severity labels: critical, high. Coverage: partial, reviewed 2026-05-21.

Example gated actions

  • Export AWS credentials to stdout or process environment formats.
  • Assume an AWS role and receive temporary credentials.
  • Read and print a secret from AWS Secrets Manager.
  • Delete S3 objects or buckets.
  • Recursively mutate S3 objects.
  • Create, update, or delete IAM access keys.
  • Create, update, deploy, or delete CloudFormation stacks.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.aws/config
Windows
%USERPROFILE%\.aws\config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.aws/credentials
Windows
%USERPROFILE%\.aws\credentials

executables

Installed executables

CommandKindExposureNote
awsexecutableindexed executableDiscovered from the local executable index.
aws_completerexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version2.36.14
manager updated2026-07-31
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:awscli
Version2.36.14
Package managerHomebrew
Homepagehttps://aws.amazon.com/cli/
Repositoryhttps://github.com/aws/aws-cli
Last updated2026-07-31T21:30:16Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Nucleus package database
  • approval-gate seed metadata
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation