Securely store and access
AWS credentials

AWS Vault stores IAM credentials in your operating system’s secure keystore
and then generates temporary credentials from those to expose to your shell and applications.

Quick start

How it works

Leverage a short-lived access credentials retrieved from Amazon’s STS service.

Backends

You can choose among different pluggable secret storage backends.

Roles and MFA

How to use Roles with one-time keys generated by MFA devices.

Single Sign On

Integrate with AWS IAM Identity Center previously known as AWS SSO.

Yubikey

Use Yubikeys with AWS Vault via Yubikey’s OATH-TOTP support.

Docker

Hook up containers to retrieve credentials from aws-vault running on the host.

Securely store and access AWS credentials