aws / aws/aws-cli

Feature Request: Hosting GPG Key

Open
#6,230 7 comments 25 reactions 0 assignees View on GitHub
feature-request installation p2
Dominant language
Python
Stars
17.3k
Forks
4.6k
Avg merge
1d 2h
Merged PRs (30d)
13

Description

**Describe the solution you'd like**

AWS has one GPG key available to download here: https://d1.awsstatic.com/security-center/aws-security-20190115-8490A11E.1746bab76c79738a45967dca72b2e5c5202aa6ad.asc

More info described here: https://aws.amazon.com/security/aws-pgp-public-key/

Unfortunately, AWS CLI uses a separate GPG key for verifying an installation: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2-linux.html#v2-install-linux-validate

This GPG key don't have an URL that can be downloaded easily with scripts, forcing you to copy/paste the key and find a way to distribute it before running your scripts.

It would be nice that this GPG key is hosted somewhere `curl` friendly, with the naming of:

```bash
awscli-exe-linux-x86_64.zip.asc
```

Another option could be storing the GPG key in a keyserver, allowing to do:

```bash
gpg --keyserver ${KEY_SERVER} --receive-keys ${KEY}
```

This would help a lot for CI/CD, scripts, automation, even VSCode DevContainers setup.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.