AWS rolesanywhere documentation change
Summary
Updated credential helper version from 1.5.0 to 1.6.0 with new SHA256 checksums, added release notes for version 1.6.0 mentioning support for password-protected PKCS#8 keys and terminal device file handling fix
Security assessment
The change adds documentation about password-protected private key support (security feature) but does not explicitly reference a CVE or security incident. The terminal device file fix could prevent potential resource leaks but lacks concrete evidence of being a security vulnerability.
Diff
diff --git a/rolesanywhere/latest/userguide/credential-helper.md b/rolesanywhere/latest/userguide/credential-helper.md index c48b31886..2fd299e2f 100644 --- a//rolesanywhere/latest/userguide/credential-helper.md +++ b//rolesanywhere/latest/userguide/credential-helper.md @@ -17,5 +17,5 @@ Platform | Architecture | Download URL | SHA256 checksum -Linux | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Linux/aws_signing_helper) | 519717f2408f3191e0ec8b35531c41bf20344b94b292cf1d763df4e6fc93af44 -Windows | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Windows/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Windows/aws_signing_helper.exe) | 673e649b6e260f3d0d594f1de66a07972bc90bd783b957bf48b974ff9ddf1681 -Darwin | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.5.0/X86_64/Darwin/aws_signing_helper) | 9f69f2ff5b277e4f38fc518da675b2cf2af8fc8a9e1ae096ae160d4d77ab7ee4 -Linux | Aarch64 | [https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Linux/aws_signing_helper) | c01ae38181309a25cb3451c84b3cdaec8e9308ffd0b89015f3c667914050b053 -Darwin | Aarch64 | [https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.5.0/Aarch64/Darwin/aws_signing_helper) | b90276a13145755793f26c832f6623a2640abb8f732654828a48aa3fdfd32f3e +Linux | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Linux/aws_signing_helper) | a535748e6a54687e945eab1d058062d7656f54db5c447172e14354d5243c1c9a +Windows | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Windows/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Windows/aws_signing_helper.exe) | 83d116ad1100ae56746020497df6c612dfce4c235012f328cff096581ebd20c9 +Darwin | x86-64 | [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Darwin/aws_signing_helper) | 1d67a2e6428a03b5877fd47cc0c7dc77d9b67865d9a144472f05b576e0a84269 +Linux | Aarch64 | [https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Linux/aws_signing_helper) | 4d924be11c89c802c566a0c95fb54b302b2b93eec5fb017bb61514387f8c7654 +Darwin | Aarch64 | [https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Darwin/aws_signing_helper) | 95464c5033fa15c82a4b2e1300994e09db3d6c1b6920007e89a039058f1c7fd5 @@ -665,0 +666,4 @@ To specify your Roles Anywhere enabled profile for use with JavaScript, see [Loa +### CredentialHelper version 1.6.0 + +On May 6, 2025, AWS IAM Roles Anywhere released Credential Helper version 1.6.0. As part of this release, password-protected private keys in PKCS#8 format are now supported, and a fix was introduced for a bug where the credential helper opened terminal device files when the process didn't have a controlling terminal. +