requests-aws4auth
AWS4 authentication for Requests
Decision gist · record as of 2026-08-14
Yes. The package is actively maintained, has no known vulnerabilities, supports current Python versions (3.7+), and solves a real problem for developers who need AWS auth v4 signing outside of boto3. Low install friction and permissive licensing make it a straightforward choice for Requests-based AWS integrations.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires valid AWS credentials (access key and secret key) and knowledge of the target AWS region and service name.
- Low install friction with a single runtime dependency (requests).
- Active maintenance with a recent release in 2026-05-01 and last commit 2026-07-27; repository is not archived.
License · maintenance · safety
MIT License (permissive) — MIT License (permissive) means you can use this package freely in commercial and private projects with minimal restrictions.
last release 2026-05-01 (105 days) · last repo commit 2026-07-27 · 190 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 48,636,489 downloads/mo, #588 on PyPI
Alternatives
Verify before relying
pip install requests-aws4auth
import requests
from requests_aws4auth import AWS4Auth
auth = AWS4Auth('ACCESS_KEY', 'SECRET_KEY', 'us-east-1', 's3')
response = requests.get('https://s3.amazonaws.com/bucket', auth=auth)- Whether automatic key regeneration behavior is thread-safe in practice despite the documentation's threading warnings
- Current support status for STS temporary credential refresh with modern botocore versions
- Whether all listed AWS services remain compatible with current AWS API versions
What it is and what it does
requests-aws4auth is a Requests authentication handler that implements AWS Signature Version 4 signing for HTTP requests to AWS services. It wraps the Requests library and automatically signs requests with AWS credentials, handling the cryptographic details of AWS auth v4 so you can make authenticated calls to S3, DynamoDB, Lambda, CloudFormation, and dozens of other AWS services without manually constructing authorization headers.
The package supports static AWS credentials, STS temporary credentials with session tokens, and dynamic credential refresh via botocore's RefreshableCredentials for long-running applications. It includes automatic signing key regeneration when request dates cross scope boundaries, multiple date format parsing (RFC 7231, RFC 850, C time, Amz-Date, ISO 8601), and alternative auth classes (StrictAWS4Auth, PassiveAWS4Auth) for different error-handling strategies. Header-based authentication is the only supported method; URL parameter and POST parameter signing are not implemented.
Use it for
- Authenticate direct REST API calls to S3, DynamoDB, or other AWS services from Python without using boto3
- Build custom AWS API clients or wrappers that need fine-grained control over request signing
- Integrate AWS service calls into applications using Requests as the HTTP transport layer
- Use STS temporary credentials or IAM assume-role credentials with automatic refresh in long-running services
- Sign requests to AWS services that do not have official Python SDKs or where boto3 is too heavyweight
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
The package is actively maintained, has no known vulnerabilities, supports current Python versions (3.7+), and solves a real problem for developers who need AWS auth v4 signing outside of boto3. Low install friction and permissive licensing make it a straightforward choice for Requests-based AWS integrations.
Install
requests-aws4auth on PyPI
Before you install
Low install friction with a single runtime dependency (requests). Active maintenance with a recent release in 2026-05-01 and last commit 2026-07-27; repository is not archived.
Requires valid AWS credentials (access key and secret key) and knowledge of the target AWS region and service name.
License in practice
MIT License (permissive) means you can use this package freely in commercial and private projects with minimal restrictions.
Quickstart
pip install requests-aws4auth
import requests
from requests_aws4auth import AWS4Auth
auth = AWS4Auth('ACCESS_KEY', 'SECRET_KEY', 'us-east-1', 's3')
response = requests.get('https://s3.amazonaws.com/bucket', auth=auth)Verify before relying
- Whether automatic key regeneration behavior is thread-safe in practice despite the documentation's threading warnings
- Current support status for STS temporary credential refresh with modern botocore versions
- Whether all listed AWS services remain compatible with current AWS API versions
Package facts
| License | MIT License permissive |
| Python support | Supports the current Python release >=3.7 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 1 packagerequests |
| Maintenance | Actively maintained 105 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 48,636,489 / month, #588 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableIntended Audience :: DevelopersLicense :: OSI Approved :: MIT LicenseNatural Language :: EnglishProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.7Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9Topic :: Internet :: WWW/HTTP |
Evidence: requests_aws4auth-1.3.2-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “requests aws4auth”
- requests-aws4authAdds AWS Signature Version 4 authentication to Python Requests,…
- types-requestsProvides type annotations for the requests library, enabling type…
- requests-futuresWraps the requests library to execute HTTP requests asynchronously…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also requests-aws-sign · requests-auth-aws-sigv4 · aws-requests-auth · awscurl · turnkey-api-key-stamper · aws-request-signer · requests-sigv4 · veracode-api-signing · aws-sns-message-validator · linode-api4