# 使用 Homebrew 安装 aws-keychain 查看 aws-keychain 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:aws-keychain ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install aws-keychain ``` 证据: local Homebrew formula metadata ## 软件包事实 - **软件包键:** brew:aws-keychain - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 3.0.0 - **来源摘要:** Uses macOS keychain for storage of AWS credentials - **主页:** - **仓库:** - **许可证:** MIT - **源码归档:** - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - aws-keychain (cli) - aws-keychain (别名) ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 all ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 3.0.0 - 本地数据: OK - 上游仓库: https://github.com/pda/aws-keychain - 检测到的最新版本: v3.0.0 (当前) - 信息: No package-manager update timestamp was available. ## 项目历史与用法 aws-keychain is a macOS shell CLI for storing AWS IAM access keys in the macOS Keychain and checking one selected key out into `~/.aws/credentials` or into a command environment. Its README explicitly says it is no longer maintained and recommends aws-vault instead. ### 项目历史 The upstream README identifies the project as a 2014-2015 Paul Annesley MIT-licensed tool. It was written for the Mac OS X Keychain era of local AWS access-key management, before newer credential-process, SSO, and vault-style workflows became the dominant recommendation. ### 采用历史 GitHub lists v3.0.0 as the latest release dated September 22, 2015 and describes the repository as succeeded by aws-vault. Homebrew analytics showed only 8 installs in 30 days, 10 in 90 days, and 56 in 365 days at the time of this batch, consistent with a historical package kept around for existing users. ### 使用方式 The command supports `add`, `ls`, `exec`, and `rm` operations for named IAM access keys in Keychain. The README warns about shell history when adding keys, supports interactive secret entry, and shows `aws-keychain exec personal aws s3 ls` as the intended safe command-running workflow. ### 为什么软件包爱好者会关心 aws-keychain is a compact example of the local-secret-storage lineage that led to better-known tools such as aws-vault. It matters less as a current recommendation and more as a package archaeology marker for how macOS AWS users avoided plaintext credentials before first-class AWS SSO workflows. ### 时间线 - 2014-2015: README copyright period for aws-keychain. - 2015: GitHub lists v3.0.0 as the latest release, with separate keychain file behavior. - 2026: Homebrew formula metadata still tracks the v3.0.0 source archive. ### Related projects - aws-vault: the successor recommended by the aws-keychain README. ### 来源 - - ## 安全说明 narrow executable package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - narrow executable package without higher-risk signals ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Credential files - macOS: ~/.aws/credentials ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** aws-keychain - **Version Scheme:** 0 - **Revision:** 0 - **Requirements:** macos - **Bottle Stable Root URL:** - **Deprecated:** yes - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 相关链接 - [Cloud CLI packages](https://pkg.so/zh-hans/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://pkg.so/zh-hans/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [rolesanywhere-credential-helper](https://pkg.so/zh-hans/brew/rolesanywhere-credential-helper/) - Shares pkgdb curated category or tags: aws, cli, credentials, iam, security. - [aws-vault](https://pkg.so/zh-hans/brew/aws-vault/) - Shares pkgdb curated category or tags: aws, cli, credentials, security. - [granted](https://pkg.so/zh-hans/brew/granted/) - Shares pkgdb curated category or tags: aws, cli, credentials, security. - [aws-rotate-key](https://pkg.so/zh-hans/brew/aws-rotate-key/) - Shares pkgdb curated category or tags: aws, cli, credentials, iam, security. - [trailscraper](https://pkg.so/zh-hans/brew/trailscraper/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [parliament](https://pkg.so/zh-hans/brew/parliament/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [terraform-iam-policy-validator](https://pkg.so/zh-hans/brew/terraform-iam-policy-validator/) - Shares pkgdb curated category or tags: aws, cli, iam, security. - [trufflehog](https://pkg.so/zh-hans/brew/trufflehog/) - Shares pkgdb curated category or tags: cli, credentials, security. - [aws-vault-binary](https://pkg.so/zh-hans/cask/aws-vault-binary/) - Security-sensitive metadata or terminology overlaps. Shared terms: aws, cli, credentials, keychain, security. ## Combined YAML source View the package source record on GitHub. [combined/aws-keychain.yml](https://github.com/mxcl/pkgdb/blob/main/combined/aws-keychain.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - cross-ecosystem install command graph