
IAM Roles Anywhere credential helper v1.0.5 now supports X.509 certificates and private keys stored in macOS Keychain and Windows certificate stores, enabling secure signing operations without keys leaving the OS stores.


<div><p>This article announces IAM Roles Anywhere credential helper version 1.0.5, which adds support for OS certificate stores on macOS and Windows.</p><ul><li>Credential helper now supports X.509 certificates stored in macOS Keychain</li><li>Windows support includes both CryptoAPI and Cryptography API: Next Generation (CNG)</li><li>Private keys remain in OS stores during signing operations, improving security</li><li>Enables workloads outside AWS to obtain temporary AWS credentials using X.509 certificates</li><li>Available in most commercial AWS regions</li></ul><p>This update enhances security by allowing credential helper to delegate signing operations to OS-managed certificate stores without exposing private keys.</p></div>


Related articles