99designs/aws-vault on Hacker News

…are always "happy 10,000 day" fodder < https://xkcd.com/1053/ > so I'll roll the dice - aws-vault https://github.com/99designs/aws-vault - often paired with the "open in container" Firefox extension (even if you use Chrome for everything…

comment by mdaniel · 2025-06-15 · in What Are the Most Underrated Tools You Use Every Day?

If you're using more complicated systems than just a single root account, have a look at https://github.com/99designs/aws-vault too.

comment by viraptor · 2025-04-18 · in Shell-secrets – GPG-encrypted environment variables

Adding to existing suggestions. - About 5, https://github.com/99designs/aws-vault is super handy to keep AWS credentials encrypted. - Use full-disk encryption as a team policy. - About 7, it is likely that this is solved by having preview…

comment by AlexITC · 2023-03-06 · in Ask HN: Secure and simple way for secret/credential management in a startup?

aws-vault[0] does this, but only for aws creds 0 - https://github.com/99designs/aws-vault

comment by yunwal · 2023-02-28 · in LastPass says DevOps engineer’s hacked computer led to security breach in 2022

Nice! Do I understand this correctly? You use aws-vault( https://github.com/99designs/aws-vault ) and configure it with IAM and MFA with YubiKeys. You configure e.g. the profile jonsmith. When you run aws-vault exec jonsmith -- aws s3 ls…

comment by jason_wo · 2023-02-28 · in LastPass says DevOps engineer’s hacked computer led to security breach in 2022

> For example https://github.com/99designs/aws-vault/ supports one-off commands and shell sessions with pre-populated tokens. I came to recommend aws-vault, it is pretty handy to not store aws keys in plain text.

comment by AlexITC · 2023-02-04 · in Ask HN: Why most CLIs are not using keyring?

…is to either use the preconfigured profile or some wrapper which does use the keychain. For example https://github.com/99designs/aws-vault/ supports one-off commands and shell sessions with pre-populated tokens. There's also similar…

comment by viraptor · 2023-02-04 · in Ask HN: Why most CLIs are not using keyring?

…https://shortcat.app/ Edit: About the AWS login form. I strongly recommend giving `aws-vault` ( https://github.com/99designs/aws-vault ) a try. It helps you skip the login form with a simple command e.g.: "aws-vault login acme-corp…

comment by pqb · 2022-12-28 · in Pa – a simple password manager based on age

…use AWS SSO then Nike must have thought parsing HTML to be The Solution™ 1: https://sourcegraph.com/github.com/99designs/aws-vault/-/blo...

comment by mdaniel · 2022-10-13 · in The State of AWS Security

For my dev machine's interactions with AWS, I use https://github.com/99designs/aws-vault You add the long lived IAM user API key/secret to it and it stores it in a password protected storage (MacOS keychain or similar). Then you invoke…

comment by jffry · 2022-07-05 · in Billion-record stolen Chinese database for sale on breach forum

For a specific example of one way how : https://github.com/99designs/aws-vault

comment by dboreham · 2022-04-28 · in Show HN: A tool to seed your dev database with real data

…those that are in AWS, you can use pass along with aws-vault to keep your ~/.aws creds in check. https://github.com/99designs/aws-vault

comment by zikduruqe · 2021-12-16 · in Clever uses of pass, the Unix password manager

Also a aws vault user here. https://github.com/99designs/aws-vault

comment by digianarchist · 2021-11-03 · in Show HN: AWS credentials management CLI tool

I think this does the same thing - https://github.com/99designs/aws-vault At least on MacOS it uses keychain. There are other storage backends for other platforms.

comment by zxcvbn4038 · 2021-09-24 · in AWS SIGv4 and SIGv4A – How AWS signs and verifies API requests

…awscli suggestion to keep the secrets around in plaintext either on disk or in env vars. [1] https://github.com/99designs/aws-vault

comment by jffry · 2021-09-23 · in AWS SIGv4 and SIGv4A – How AWS signs and verifies API requests

…if you need to use the managed ActiveDirectory service, which needs to be in the same region [1] https://github.com/99designs/aws-vault [2] https://github.com/benkehoe/aws-sso-util

comment by vladvasiliu · 2021-01-08 · in CVE-2021-3011: Key recovery on Google Titan Key

mostly copy-pasta from an earlier comment[0] of mine: https://github.com/99designs/aws-vault/issues/578 was for an issue with remote servers accessing the localhost ec2 metadata service that aws-vault can run, that worked exactly by using…

comment by philsnow · 2020-10-14 · in HashiCorp Boundary

…support for AssumeRoleWithWebIdentity making it cheap to issue yourself disposable credentials: https://github.com/99designs/aws-vault/blob/v6.0.0-beta9/USA... including launching AWS Console links for those Roles:…

comment by mdaniel · 2020-08-18 · in How to give access to AWS resources without creating 100s of IAM Users?

…AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, etc. means that you can write programs like aws-vault ( https://github.com/99designs/aws-vault ) which can acquire a temporary AWS session and then execute another command with the creds injected…

comment by ucarion · 2020-08-01 · in Conventions for Command Line Options

…"1.2.3.4/32" }, "BoolIfExists": { "aws:MultiFactorAuthPresent": "true" } } } ] } [0] AWS Vault: https://github.com/99designs/aws-vault/

comment by vladvasiliu · 2020-06-24 · in Bastions on demand in an AWS VPC

…I wish would get more aggressively addressed by AWS. [1] https://github.com/trek10inc/awsume , https://github.com/99designs/aws-vault , and a few other tools make this much easier to deal with locally.

comment by shortj · 2020-06-11 · in AWS CodeArtifact: A fully managed software artifact repository service

…https://gitlab.com/snippets/1979112 You should be able to adapt it to Firefox pretty easily. [0] https://github.com/99designs/aws-vault

comment by JimDabell · 2020-05-22 · in Firefox extensions to make remote work and school a little better

…that the browser doesn't do more to prevent connections from from "localhost" to "not localhost". https://github.com/99designs/aws-vault/issues/578 was for an issue with remote servers accessing the localhost ec2 metadata service that…

comment by philsnow · 2020-05-21 · in Stealing secrets from developers using WebSockets

…the yubikey”. I’ve seen other systems that move the AWS secret keys to the OS keychain (for example https://github.com/99designs/aws-vault ), which seem to harden against (1) without weakening (2). Is there a mitigation I’m not taking into…

comment by akerl_ · 2019-04-04 · in Using a Yubikey as smartcard for SSH public key authentication

Latacora perspective, AWS specifically: go install aws-vault. https://github.com/99designs/aws-vault There are a ton of benefits to aws-vault. Strategically: getting everyone on an aws-vault workflow is step one to eventually making your…

comment by lvh · 2018-06-20 · in Ask HN: What is the first thing you implement at a new company?

…in a plain text file :/ lack of alternatives, I’m afraid. As is apparent from this thread :) 1 https://github.com/99designs/aws-vault 2 https://github.com/hraban/go-onepassword

comment by nothrabannosir · 2018-03-28 · in The 1Password 7 Beta for Mac

…cli on every invocation. You just want to look at this file, as the env vars are not documented. https://github.com/99designs/aws-vault/blob/4acbb48b48b90555...

comment by willejs · 2017-10-23 · in AWS bastions and assume-role

…like aws-vault exec "$AWS_PROFILE" -- env | egrep '^AWS' | awk '{print "export " $1}' [1] https://github.com/99designs/aws-vault

comment by gregwebs · 2017-10-23 · in AWS bastions and assume-role