Tools Practical By Samson Tanimawo, PhD Published Feb 1, 2026 4 min read

aws-vault for Credential Management

aws-vault stores AWS credentials in OS keystore.

Idea

Credentials in macOS Keychain or Linux equivalent. Not in plain ~/.aws/credentials.

Reduces credential theft risk.

aws-vault exec profile -- aws s3 ls runs commands with creds.

Session-scoped; expires.

aws sso login for AWS SSO setups.

Pick by your auth setup.