---
id: keyrings-codeartifact
version: "2.1.2"
license: unclear
license_treatment: unclear
maintenance: active
---

# keyrings.codeartifact — Automatically retrieve credentials for AWS CodeArtifact.

License: unclear · Maintenance: active · Downloads: 2.3M/mo

## What it is and what it does

keyrings.codeartifact is a keyring backend that bridges AWS CodeArtifact and Python package managers. It extends the keyring library to automatically fetch and inject time-limited AWS access tokens when pip, twine, or other keyring-aware tools attempt to access a private PyPI repository hosted on CodeArtifact. The package reads AWS credentials from ~/.aws/credentials or environment variables and manages token lifecycle transparently.

Once installed, it requires minimal setup: a configuration section in keyringrc.cfg specifying AWS profile, token duration, and optional access keys. It supports both simple single-account setups and advanced multi-account configurations with domain, account, region, and repository name matching to route requests to the correct AWS credentials.

Use it for:

- Publish packages to a private CodeArtifact repository without manually managing temporary tokens.
- Consume packages from CodeArtifact in CI/CD pipelines using pip with automatic credential injection.
- Manage multiple AWS accounts or CodeArtifact repositories with different credential profiles in a single configuration.
- Integrate CodeArtifact authentication into existing pip and twine workflows without script changes.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides AWS CodeArtifact authentication for pip and twine by extending the keyring library to automatically inject time-limited access tokens.

Yes, if you use AWS CodeArtifact for private package distribution. The package is actively maintained, has low install friction, and solves a real authentication problem for CodeArtifact users. The only caveat is the unclear license status—verify it aligns with your project's licensing requirements before committing to it.

## Install

pip install keyrings-codeartifact
uv add keyrings-codeartifact
poetry add keyrings-codeartifact

## Installing keyrings.codeartifact

Before you install: Low friction install with two runtime dependencies (keyring and boto3). Actively maintained with a recent commit on 2026-04-27 and regular releases.

License in practice: License status is unclear; the package metadata does not declare an SPDX identifier or raw license text. Verify the license before use in commercial or restricted contexts.

Quickstart:

pip install keyrings.codeartifact

Then configure keyring in ~/.keyringrc.cfg:
[codeartifact]
profile_name=default
token_duration=1800

pip install --index-url https://${DOMAIN}-${ACCOUNT}.d.codeartifact.${REGION}.amazonaws.com/pypi/${REPOSITORY}/simple/ mypackage

Requires Python >= 3.9 and AWS credentials configured in ~/.aws/credentials or via environment variables.

Verify before relying:

- Whether the unclear license status is a known issue or an oversight in package metadata.
- Specific pip and twine version compatibility requirements for keyring integration.

## Package facts

- License: not declared (unclear)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 2.3M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws codeartifact authentication, keyring backend for codeartifact, pip twine aws credentials, private pypi repository auth, aws codeartifact keyring, automated token injection pypi, aws-integration, package-management

[View on SkillFed](https://skillfed.io/packages/keyrings-codeartifact) · [View on PyPI](https://pypi.org/project/keyrings-codeartifact/)