# 使用 Homebrew 安装 okta-awscli

查看 okta-awscli 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:okta-awscli
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install okta-awscli
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:okta-awscli
- **软件包管理器:** Homebrew
- **版本:** 0.5.5
- **来源摘要:** Okta authentication for awscli
- **主页:** <https://github.com/okta-awscli/okta-awscli>
- **最后更新:** 2026-07-10T11:10:12Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- okta-awscli (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 0.5.5
## 项目历史与用法

okta-awscli is a Python command-line bridge between Okta SSO and AWS command-line credentials. It authenticates a user with Okta, obtains a SAML assertion, and exchanges that assertion for temporary AWS STS credentials that can be used by awscli, boto, boto3, and other AWS API tooling.

### 项目历史

The GitHub repository was created on 2017-07-22. Its README positions the project as a successor-style implementation inspired by nimbusscale/okta_aws_login, with the important design difference that okta-awscli uses Okta APIs during authentication rather than scraping and parsing HTML.

### 采用历史

The package sits in the long-running niche of enterprise AWS federation helpers. Okta developer forum threads from 2017 and AWS documentation for AssumeRoleWithSAML show the underlying need: organizations wanted AWS CLI access without distributing long-lived IAM user keys, using a corporate identity provider and AWS STS instead.

### 使用方式

Operators configure Okta and AWS profile details in a local okta-awscli configuration file, then run the executable to populate or refresh AWS credential material. The practical workflow is less about general Okta administration and more about making federated, MFA-backed AWS access feel like normal AWS CLI profile usage.

### 为什么软件包爱好者会关心

For package nerds, okta-awscli is a good example of a small package that encodes an enterprise identity pattern: browser SSO and SAML federation collapsed into a repeatable CLI credential flow. Its continued Homebrew packaging also records the era before vendor-provided AWS federation CLIs fully absorbed this use case.

### 时间线

- 2017-07-22: The okta-awscli/okta-awscli repository was created on GitHub.
- 2018-2024: Public issues and packaging activity show maintenance around Okta MFA behavior, Python dependencies, macOS certificate handling, and AWS credential edge cases.
- 2026-07-01: GitHub repository metadata reported 314 stars, 144 forks, Python as the primary language, and Apache-2.0 licensing.

### Related projects

- Related tools include nimbusscale/okta_aws_login, Okta's community-supported okta-aws-cli-assume-role, and Okta's separate okta-aws-cli project. AWS STS AssumeRoleWithSAML is the underlying AWS operation that makes the pattern possible.

### 来源

- <https://api.github.com/repos/okta-awscli/okta-awscli>
- <https://devforum.okta.com/t/accessing-aws-cli-through-okta/161>
- <https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html>
- <https://formulae.brew.sh/formula/okta-awscli>
- <https://github.com/okta-awscli/okta-awscli>
- <https://github.com/okta/okta-aws-cli>
- <https://github.com/oktadev/okta-aws-cli-assume-role>


## 安全说明

没有找到 okta-awscli 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.okta-aws

## Credential files

- Unix: ~/.aws/credentials, ~/.okta-credentials.cache

## Combined YAML source

View the package source record on GitHub. [combined/okta-awscli.yml](https://github.com/mxcl/pkgdb/blob/main/combined/okta-awscli.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph
