# AWS Vault

> AWS Vault is a tool to securely store and access AWS credentials in a development environment.


## Usage
- [Getting Help](https://byteness.github.io/aws-vault/docs/getting-help/): Context-sensitive help is available for every command in aws-vault.
# Show general help about …
- [Typical use-cases for aws-vault](https://byteness.github.io/aws-vault/docs/typical-use-cases/): There are a few different ways aws-vault can be used
Use-case 1: aws-vault is the executor and …
- [Config](https://byteness.github.io/aws-vault/docs/config/): AWS config file aws-vault uses your ~/.aws/config to load AWS config. This should work identically …
- [Backends](https://byteness.github.io/aws-vault/docs/backends/): You can choose among different pluggable secret storage backends. You can set the backend using the …
- [Managing credentials](https://byteness.github.io/aws-vault/docs/managing-credentials/): Using multiple profiles In addition to using IAM roles to assume temporary privileges as described …
- [Managing Sessions](https://byteness.github.io/aws-vault/docs/managing-sessions/): Executing a command Running aws-vault exec will run a command with AWS credentials.
When using exec, …
- [MFA](https://byteness.github.io/aws-vault/docs/mfa/): To enable MFA for a profile, specify the mfa_serial in ~/.aws/config. You can retrieve the …
- [Single Sign On (SSO)](https://byteness.github.io/aws-vault/docs/sso/): AWS IAM Identity Center provides single sign on, and was previously known as AWS SSO.
If your …
- [Assuming roles with web identities](https://byteness.github.io/aws-vault/docs/web-identities/): AWS supports assuming roles using web identity federation and OpenID Connect , including login using …
- [Using credential_process](https://byteness.github.io/aws-vault/docs/credential-process/): The AWS CLI config supports sourcing credentials directly from an external process, using …
- [Using a Yubikey](https://byteness.github.io/aws-vault/docs/yubikey/): Yubikeys can be used with AWS Vault via Yubikey’s OATH-TOTP support. TOTP is necessary because …
- [Shell completion](https://byteness.github.io/aws-vault/docs/shell-completion/): You can generate shell completions for
bash: eval "$(curl -fs …
- [Desktop apps](https://byteness.github.io/aws-vault/docs/desktop-apps/): You can use desktop apps with temporary credentials from AWS Vault too! For example on macOS run …
- [Docker](https://byteness.github.io/aws-vault/docs/docker/): It’s possible for Docker containers to retrieve credentials from aws-vault running on the …

## Root Pages
- [Getting Started](https://byteness.github.io/aws-vault/getting-started/): AWS Vault is a tool to securely store and access AWS credentials in a development environment.
AWS …

---
Generated on 2026-09-15 09:11:37 UTC
Site: https://byteness.github.io/aws-vault/