AWS rolesanywhere medium security documentation change

Service: rolesanywhere · 2026-06-07 · Security-related medium

File: rolesanywhere/latest/userguide/credential-helper.md

Summary

Updated credential helper download links to version 1.8.3 with new checksums and added release notes including a PKCS#11 session handling fix.

Security assessment

Version update fixes a security-relevant PKCS#11 certificate matching error across multiple slots. This addresses potential cryptographic handling vulnerabilities in credential management.

Diff

diff --git a/rolesanywhere/latest/userguide/credential-helper.md b/rolesanywhere/latest/userguide/credential-helper.md
index 6f2b6ee6f..777c391f5 100644
--- a//rolesanywhere/latest/userguide/credential-helper.md
+++ b//rolesanywhere/latest/userguide/credential-helper.md
@@ -19,5 +19,5 @@ Platform | Architecture | Download URL | SHA256 checksum
-Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/Linux/Amzn2023/aws_signing_helper) |  7addb6eb6e84fcee6c9c013b895ea6ad01672188f1a52a61118d22c977c4432e  
-Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/Windows/Server2022/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/Windows/Server2022/aws_signing_helper.exe) |  933afda774b37002a06fc4032ea9eb5b369e32fbc9ca8a2d242605ef60e3a3f5  
-Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.2/X86_64/MacOS/Sonoma/aws_signing_helper) |  b38d8e784d7278a91a9d7a9cde7bf4ef2b6e621d81f68e20eb24c67fb1d1839d  
-Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.2/Aarch64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.2/Aarch64/Linux/Amzn2023/aws_signing_helper) |  facb914fdef33bbc01db0b377c2b4307bce00a3837de47297bae024a227eadb4  
-Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.2/Aarch64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.2/Aarch64/MacOS/Sonoma/aws_signing_helper) |  0a2b2749a56f5d4ce12df5e565dc809a3be6e50c8570e30e3c9862324425a4b5  
+Linux |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/Linux/Amzn2023/aws_signing_helper) |  2517d3b7853c39c0004d27cbb03c51a5ec0e87b12f4046c86929f5c8fca4c9c1  
+Windows |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/Windows/Server2022/aws_signing_helper.exe](https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/Windows/Server2022/aws_signing_helper.exe) |  eff8f79026d8eda5c196d080a6a6a2e77e46649a2d0a2d99f5295c2ce7fb9385  
+Darwin |  x86-64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.3/X86_64/MacOS/Sonoma/aws_signing_helper) |  55ce348906799ebaf61e8c398af071f21864df5ee15d2a17c85348c49fa1c64f  
+Linux |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.3/Aarch64/Linux/Amzn2023/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.3/Aarch64/Linux/Amzn2023/aws_signing_helper) |  2b5d83e2924b33a48881e278ab206558773ff207b599286f41eb37010ca40b9c  
+Darwin |  Aarch64 |  [https://rolesanywhere.amazonaws.com/releases/1.8.3/Aarch64/MacOS/Sonoma/aws_signing_helper](https://rolesanywhere.amazonaws.com/releases/1.8.3/Aarch64/MacOS/Sonoma/aws_signing_helper) |  58c84be4a62c32d28d9b8bc54a3a33cc951f71ba45c3b75c64079e0eca6da994  
@@ -671,0 +672,4 @@ To specify your Roles Anywhere enabled profile for use with JavaScript, see [Loa
+### CredentialHelper version 1.8.3
+
+On May 13, 2026, AWS IAM Roles Anywhere released Credential Helper version 1.8.3. As a part of this release, the `serve` command now supports graceful shutdown on SIGTERM/SIGINT, a dropped error in PKCS#11 session handling when matching certificates across multiple slots has been fixed, and Go has been upgraded to version 1.26.3.
+