---
id: cloudauthz
version: "0.6.0"
license: MIT
license_treatment: permissive
maintenance: abandoned
---

# cloudauthz — Implements means of authorization delegation on cloud-based resource providers.

License: permissive · Maintenance: abandoned · Downloads: 108.0K/mo

## What it is and what it does

Cloudauthz is a Python library that abstracts credential acquisition across three major cloud providers—AWS, Azure, and GCP. It takes provider-specific configuration (such as an AWS role ARN, Azure tenant credentials, or a GCP service account key) and returns temporary credentials as a dictionary. The library depends on requests for HTTP calls and adal for Azure authentication.

The package was designed to simplify multi-cloud authorization workflows by offering a unified interface. However, it has been abandoned since mid-2019 and has received no maintenance or updates for over six years. The last commit predates significant changes to cloud provider authentication standards, raising questions about compatibility with current API versions and security practices.

Use it for:

- Obtain temporary AWS credentials from an OIDC token and role ARN for federated access.
- Exchange Azure tenant/client credentials for access tokens to Azure services.
- Load GCP service account credentials and obtain tokens for Google Cloud resources.
- Simplify credential management in legacy multi-cloud applications that predate modern SDKs.
- Prototype authorization delegation workflows across different cloud providers in a single codebase.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Cloudauthz obtains temporary credentials from AWS, Azure, or GCP by exchanging provider-specific configuration for short-lived access tokens.

No. The package is abandoned (last update June 2019, no commits in six years) and cloud provider authentication APIs have evolved significantly since then. The dependencies (adal, requests) may no longer align with current Azure and cloud authentication standards. For new projects, use each cloud provider's official SDK directly (boto3 for AWS, Azure SDK for Python, google-cloud-python). Only consider cloudauthz if you are maintaining legacy code that already depends on it and cannot migrate.

## Install

pip install cloudauthz
uv add cloudauthz
poetry add cloudauthz

## Installing cloudauthz

Before you install: Installation is straightforward (pure Python wheel, low friction), but the package has been abandoned since June 2019 with no updates in over six years. Maintenance is inactive and the project shows minimal community engagement (3 stars).

License in practice: MIT license is permissive and poses no restrictions on use, modification, or distribution in commercial or private projects.

Quickstart:

from cloudauthz import CloudAuthz

cloudauthz = CloudAuthz()
config = {"id_token": "...", "role_arn": "..."}
credentials = cloudauthz.authorize("aws", config)

Requires valid credentials and configuration specific to the target cloud provider (AWS role ARN, Azure tenant/client secrets, or GCP service account key).

Verify before relying:

- Whether the package still works with current AWS, Azure, and GCP authentication APIs given the last update was June 2019.
- Whether adal (Azure AD library) dependency is still maintained and compatible with modern Azure authentication flows.
- Whether the package handles credential refresh or only one-time token exchange.

## Package facts

- License: MIT (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: abandoned
- Downloads: 108.0K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

cloud provider credential exchange, aws azure gcp authorization, temporary cloud credentials, multi-cloud authentication, cloud access token delegation, cross-cloud credential management, cloud provider token exchange, multi-cloud, credential-exchange, abandoned

[View on SkillFed](https://skillfed.io/packages/cloudauthz) · [View on PyPI](https://pypi.org/project/cloudauthz/)