keyrings.codeartifact
Automatically retrieve credentials for AWS CodeArtifact.
Decision gist · record as of 2026-08-14
Yes, if you use AWS CodeArtifact for private package distribution. The package is actively maintained, has low install friction, and solves a real authentication problem for CodeArtifact users. The only caveat is the unclear license status—verify it aligns with your project's licensing requirements before committing to it.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python >= 3.9 and AWS credentials configured in ~/.aws/credentials or via environment variables.
- Low friction install with two runtime dependencies (keyring and boto3).
- Actively maintained with a recent commit on 2026-04-27 and regular releases.
License · maintenance · safety
(unclear) — License status is unclear; the package metadata does not declare an SPDX identifier or raw license text. Verify the license before use in commercial or restricted contexts.
last release 2025-07-01 (409 days) · last repo commit 2026-04-27 · 15 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 2,277,849 downloads/mo, #3,170 on PyPI
Alternatives
Verify before relying
pip install keyrings.codeartifact
Then configure keyring in ~/.keyringrc.cfg:
[codeartifact]
profile_name=default
token_duration=1800
pip install --index-url https://${DOMAIN}-${ACCOUNT}.d.codeartifact.${REGION}.amazonaws.com/pypi/${REPOSITORY}/simple/ mypackage- Whether the unclear license status is a known issue or an oversight in package metadata.
- Specific pip and twine version compatibility requirements for keyring integration.
What it is and what it does
keyrings.codeartifact is a keyring backend that bridges AWS CodeArtifact and Python package managers. It extends the keyring library to automatically fetch and inject time-limited AWS access tokens when pip, twine, or other keyring-aware tools attempt to access a private PyPI repository hosted on CodeArtifact. The package reads AWS credentials from ~/.aws/credentials or environment variables and manages token lifecycle transparently.
Once installed, it requires minimal setup: a configuration section in keyringrc.cfg specifying AWS profile, token duration, and optional access keys. It supports both simple single-account setups and advanced multi-account configurations with domain, account, region, and repository name matching to route requests to the correct AWS credentials.
Use it for
- Publish packages to a private CodeArtifact repository without manually managing temporary tokens.
- Consume packages from CodeArtifact in CI/CD pipelines using pip with automatic credential injection.
- Manage multiple AWS accounts or CodeArtifact repositories with different credential profiles in a single configuration.
- Integrate CodeArtifact authentication into existing pip and twine workflows without script changes.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you use AWS CodeArtifact for private package distribution.
The package is actively maintained, has low install friction, and solves a real authentication problem for CodeArtifact users. The only caveat is the unclear license status—verify it aligns with your project's licensing requirements before committing to it.
Install
keyrings-codeartifact on PyPI
Before you install
Low friction install with two runtime dependencies (keyring and boto3). Actively maintained with a recent commit on 2026-04-27 and regular releases.
Requires Python >= 3.9 and AWS credentials configured in ~/.aws/credentials or via environment variables.
License in practice
License status is unclear; the package metadata does not declare an SPDX identifier or raw license text. Verify the license before use in commercial or restricted contexts.
Quickstart
pip install keyrings.codeartifact
Then configure keyring in ~/.keyringrc.cfg:
[codeartifact]
profile_name=default
token_duration=1800
pip install --index-url https://${DOMAIN}-${ACCOUNT}.d.codeartifact.${REGION}.amazonaws.com/pypi/${REPOSITORY}/simple/ mypackageVerify before relying
- Whether the unclear license status is a known issue or an oversight in package metadata.
- Specific pip and twine version compatibility requirements for keyring integration.
Package facts
| License | Not declared unclear |
| Python support | Supports the current Python release >=3.9 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 2 packageskeyringboto3 |
| Maintenance | Actively maintained 409 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 2,277,849 / month, #3,170 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 4 - BetaIntended Audience :: DevelopersProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: Only |
Evidence: keyrings_codeartifact-2.1.2-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “aws codeartifact authentication”
- keyrings.codeartifactProvides AWS CodeArtifact authentication for pip and twine by…
- mypy-boto3-codeartifactProvides type annotations and IDE autocompletion support for boto3's…
- requests-aws4authAdds AWS Signature Version 4 authentication to Python Requests,…
Give your agent the search over MCP, or paste the wish link into any chat.
More Security packages
Provides Python bindings to the FreeDesktop.org Secret Service API for securely storing and retrieving passwords and secrets through GNOME Keyring, KWallet, or KeePassXC.
MSAL for Python handles OAuth2 and OpenID Connect authentication with Microsoft identity services, managing token acquisition, caching, and refresh for applications integrating with Microsoft Entra ID, Microsoft Accounts, and Azure AD B2C.
joserfc implements JOSE standards (JWS, JWE, JWK, JWT, and related RFCs) for signing, encrypting, and managing JSON-based cryptographic tokens in Python.
Authlib provides a complete implementation of OAuth 1.0, OAuth 2.0, and OpenID Connect 1.0 for building both authentication clients and servers, with built-in support for JWS, JWK, JWA, and JWT standards.
Provides low-level CFFI bindings to the official Argon2 password hashing algorithm for use by libraries and applications that need direct access to Argon2 without higher-level abstractions.
ADAL for Python authenticates applications with Azure Active Directory to obtain tokens for accessing Azure AD-protected resources.
Install only if maintaining existing code that already depends on it, and plan a migration.
See also keyrings.google-artifactregistry-auth · artifacts-keyring · aws-requests-auth · git-remote-codecommit · keyring · botocore · requests-auth-aws-sigv4 · keyrings.alt · aws-request-signer · keyrings.cryptfile