AWS rolesanywhere high security documentation change

Service: rolesanywhere · 2025-06-04 · Security-related high

File: rolesanywhere/latest/userguide/credential-helper.md

Summary

Updated Credential Helper to version 1.7.0 with new checksums and added changelog entry mentioning TLS bug fixes and dependency vulnerability patches

Security assessment

Explicitly addresses security vulnerabilities through dependency upgrades and fixes TLS root certificate handling, which impacts secure communication.

Diff

diff --git a/rolesanywhere/latest/userguide/credential-helper.md b/rolesanywhere/latest/userguide/credential-helper.md
index 2fd299e2f..8b4f3f5f2 100644
--- a//rolesanywhere/latest/userguide/credential-helper.md
+++ b//rolesanywhere/latest/userguide/credential-helper.md
@@ -17,5 +17,5 @@ Platform | Architecture | Download URL | SHA256 checksum
-Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Linux/aws_signing_helper) |  a535748e6a54687e945eab1d058062d7656f54db5c447172e14354d5243c1c9a  
-Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Windows/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Windows/aws_signing_helper.exe) |  83d116ad1100ae56746020497df6c612dfce4c235012f328cff096581ebd20c9  
-Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/X86_64/Darwin/aws_signing_helper) |  1d67a2e6428a03b5877fd47cc0c7dc77d9b67865d9a144472f05b576e0a84269  
-Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Linux/aws_signing_helper) |  4d924be11c89c802c566a0c95fb54b302b2b93eec5fb017bb61514387f8c7654  
-Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.6.0/Aarch64/Darwin/aws_signing_helper) |  95464c5033fa15c82a4b2e1300994e09db3d6c1b6920007e89a039058f1c7fd5  
+Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Linux/aws_signing_helper) |  e932f029b73f97523c1dea2e78e9543d9e2753c387c4c46e77be8c1d9424db0f  
+Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Windows/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Windows/aws_signing_helper.exe) |  01b678ef0173dd6a9ea302c125f0ce4bfccf9ec153070f76eeb71b421d6615f5  
+Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.0/X86_64/Darwin/aws_signing_helper) |  7c9bcab806754572b0a980878a884ff2fcbd4482e2118dd1cb229b3a978c7eab  
+Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Linux/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Linux/aws_signing_helper) |  800fc208b74cdb64b8c7270c41aa0c9d2f9bf5bba498539513acb30f8eb8f164  
+Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Darwin/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.0/Aarch64/Darwin/aws_signing_helper) |  644ea2a4a396a2a653ae8fc10bab4eef30a6b8763aa9f2adcd6cfb96d610fd6b  
@@ -665,0 +666,4 @@ To specify your Roles Anywhere enabled profile for use with JavaScript, see [Loa
+### CredentialHelper version 1.7.0
+
+On Jun 2, 2025, AWS IAM Roles Anywhere released Credential Helper version 1.7.0. As part of this release, a bug was fixed that prevented adding custom roots for use in TLS, and an enhancement was introduced to make parsing logic more robust for cert selectors provided through the CLI. Dependency module versions were also upgraded to address any vulnerabilities picked up by scanners. 
+