AWS rolesanywhere high security documentation change

Service: rolesanywhere · 2026-03-07 · Security-related high

File: rolesanywhere/latest/userguide/credential-helper.md

Summary

Updated Credential Helper download URLs, checksums, and version to 1.8.0. Added release notes mentioning ML-DSA signature support, PKCS#11 dynamic linking fix, and security vulnerability patches.

Security assessment

Explicitly states that several security vulnerabilities were patched in version 1.8.0. The mention of security vulnerability patches indicates concrete remediation of security issues.

Diff

diff --git a/rolesanywhere/latest/userguide/credential-helper.md b/rolesanywhere/latest/userguide/credential-helper.md
index 7f6b85520..fc6fabdaf 100644
--- a//rolesanywhere/latest/userguide/credential-helper.md
+++ b//rolesanywhere/latest/userguide/credential-helper.md
@@ -17,5 +17,5 @@ Platform | Architecture | Download URL | SHA256 checksum
-Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Linux/Amzn2023/aws_signing_helper) |  ef609ae021e86a2778b63dc80f4280033fcb1450bddb8b234b4ccd30f917ed21  
-Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Windows/Server2019/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/Windows/Server2019/aws_signing_helper.exe) |  adf11e5220423665b32ed04e0f2e51106608e49946823e17d2093d52995b5485  
-Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.3/X86_64/MacOS/Sonoma/aws_signing_helper) |  39b8eb71581cefe440c35f66e7c8c31e5f5054d800382682a624fb7b7d5dd14d  
-Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/Linux/Amzn2023/aws_signing_helper) |  7aaf8b3a4ceac464931dec27bcfd58e4facc93fb48402381e3f96bb45de5a356  
-Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.7.3/Aarch64/MacOS/Sonoma/aws_signing_helper) |  8abc18e9041f11e1d17632dda7ec91261b943db1581b310947d4d0632129e655  
+Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Linux/Amzn2023/aws_signing_helper) |  4ec587c4b2a7a4b2980f0fb084c3fabd99a862ce1091341ba514ae3c0923b905  
+Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Windows/Server2022/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/Windows/Server2022/aws_signing_helper.exe) |  0ca06826638b1d3e8046b583c4b4c2a9f56be738eb6edbdc44d8771a3cc2366b  
+Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.0/X86_64/MacOS/Sonoma/aws_signing_helper) |  514d021df32b39c78d565fbf04d9a7ed9693926824bbf3d4fa8b8f3ad6b52f13  
+Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/Linux/Amzn2023/aws_signing_helper) |  eb1c70b8ef8b02326cd0f177572285d605361920ff22ae0876bb4172e936f968  
+Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.0/Aarch64/MacOS/Sonoma/aws_signing_helper) |  a13d8b6be18b2031b3b900e4349ecb8d301276b190988a1b599e1d70d8067ab0  
@@ -669,0 +670,4 @@ To specify your Roles Anywhere enabled profile for use with JavaScript, see [Loa
+### CredentialHelper version 1.8.0
+
+On March 5, 2026, AWS IAM Roles Anywhere released Credential Helper version 1.8.0. As a part of this release, ML-DSA signatures are now supported, the PKCS#11 dynamic linking issue has been fixed, and several security vulnerabilities have been patched.
+