使用 Homebrew 安装 aws-spiffe-workload-helper

项目链接

• 主页

命令和别名

• aws-spiffe-workload-helper

项目历史

The official README describes the helper as a lightweight tool for providing workloads with AWS credentials using SPIFFE identity, with support for X.509 SVIDs through AWS Roles Anywhere and JWT SVIDs through AssumeRoleWithWebIdentity.

采用历史

The repository is a SPIFFE tiny-project and remains a narrow integration tool rather than a broad CLI ecosystem. Its GitHub releases reached v0.0.5 on February 16, 2026.

使用方式

Users configure AWS SDKs and CLIs by setting `credential_process` in `~/.aws/config` to invoke `aws-spiffe-workload-helper`. The helper can return credentials to stdout or write a user-specified credential file for legacy consumers.

为什么软件包爱好者会关心

The package is notable because it bridges SPIFFE Workload API identity, AWS Roles Anywhere, AWS STS, and the AWS external credential process contract in a single distributable binary.

时间线

• 2024: Initial public development began in the official repository.
• 2025: Early v0.0.x releases were published.
• 2026: v0.0.5 was published on GitHub Releases.

Related projects

• SPIFFE and the SPIFFE Workload API provide the identity source.
• AWS Roles Anywhere and AWS STS AssumeRoleWithWebIdentity provide AWS credential exchange targets.
• AWS rolesanywhere-credential-helper is the AWS tool the README compares this helper against.

来源

• https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html
• https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html
• https://docs.aws.amazon.com/rolesanywhere/latest/userguide/introduction.html
• https://github.com/spiffe/aws-spiffe-workload-helper#readme
• https://github.com/spiffe/aws-spiffe-workload-helper/releases