Feature Request: Hosting GPG Key
- Dominant language
- Python
- Stars
- 17.3k
- Forks
- 4.6k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 13
Description
**Describe the solution you'd like**
AWS has one GPG key available to download here: https://d1.awsstatic.com/security-center/aws-security-20190115-8490A11E.1746bab76c79738a45967dca72b2e5c5202aa6ad.asc
More info described here: https://aws.amazon.com/security/aws-pgp-public-key/
Unfortunately, AWS CLI uses a separate GPG key for verifying an installation: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2-linux.html#v2-install-linux-validate
This GPG key don't have an URL that can be downloaded easily with scripts, forcing you to copy/paste the key and find a way to distribute it before running your scripts.
It would be nice that this GPG key is hosted somewhere `curl` friendly, with the naming of:
```bash
awscli-exe-linux-x86_64.zip.asc
```
Another option could be storing the GPG key in a keyserver, allowing to do:
```bash
gpg --keyserver ${KEY_SERVER} --receive-keys ${KEY}
```
This would help a lot for CI/CD, scripts, automation, even VSCode DevContainers setup.
Contributor guide
Assessment
This issue has not been assessed yet.