AWS SIGv4 and SIGv4A – How AWS Signs and Verifies API Requests

• aws-vault

  49 8,153 1.7 Go

  A vault for securely storing and accessing AWS credentials in development environments

  

I'm a big fan of aws-vault [1], which helps securely store your tokens and use them to obtain temporary credentials which are time-limited and constrained to a specific IAM role.

It's not as good as having something that supports a hardware token, of course, but it's better than the default awscli suggestion to keep the secrets around in plaintext either on disk or in env vars.

[1] https://github.com/99designs/aws-vault

• awsv4signer

  1 2 0.0 Go

  Go aws v4 signer implementation with pluggable hmac function

This is neat, although it throws a wrench into my recent move encrypt my AWS secret access key with my TPM to prevent the key from being used anywhere besides my laptop[0].

[0]: https://github.com/psanford/awsv4signer/tree/main/examples/t...

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tpm2-tools

  1 666 8.2 C

  The source repository for the Trusted Platform Module (TPM2.0) tools

  

If you are looking for some references besides my linked code, this comment[0] on the tpm2-tools repo will probably be useful. FWIW, I've moved my workflow over to having long lived aws keys protected by my TPM and then I generate session credentials from that for normal aws cli usage.

[0]: https://github.com/tpm2-software/tpm2-tools/issues/1597

• exile

  1 42 0.0 Python

  Python YubiKey AWS signature library (by pyauth)

  

• aws-cli

  48 14,897 9.8 Python

  Universal Command Line Interface for Amazon Web Services

  

> I was very surprised to see that awscli still doesn't support Yubikeys

Thanks, but you cannot[0] use hardware keys on the terminal.

[0] https://github.com/aws/aws-cli/issues/3607

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project