aws-vault

aws-vault Plugin

A tool for securely storing and accessing AWS credentials in development environments. Uses OS-native secure keystore to protect credentials.

Commands

Credential Execution

• aws-vault cred exec — Execute command with AWS credentials

Utility

• aws-vault _ _ — Passthrough to aws-vault CLI

Usage Examples

• "Execute with AWS credentials"
• "Secure AWS credential storage"
• "AWS profile management"
• "Run command with AWS profile"

Installation

brew install aws-vault

Examples

# Execute with profile
aws-vault cred exec myprofile -- aws s3 ls

# Set session duration
aws-vault cred exec myprofile --duration 1h -- aws s3 ls

# Without session token
aws-vault cred exec myprofile --no-session -- aws s3 ls

# Any aws-vault command with passthrough
aws-vault _ _ exec myprofile -- aws s3 ls
aws-vault _ _ list
aws-vault _ _ add myprofile

Key Features

• Secure - OS-native keystore
• Profiles - Multiple AWS profiles
• Sessions - Temporary sessions
• MFA - MFA support
• Keychain - macOS Keychain
• Windows - Credential Manager
• Linux - Secret Service
• Safe - No plaintext secrets
• Dev - Development friendly
• Cloud - AWS focused

Notes

• Great for AWS development
• No plaintext credentials
• Supports MFA
• Perfect for team security