requests-sigv4

What it is and what it does

requests-sigv4 is a thin wrapper that integrates AWS Signature Version 4 signing into the requests library. It takes AWS credentials and request details, constructs a valid SigV4 signature, and attaches it to outgoing HTTP requests so they authenticate against AWS API endpoints. The package depends on requests for HTTP transport, boto3 for credential handling, and requests-aws-sign for the actual signing logic.

The package was last updated in June 2022 and is no longer maintained. While it still installs and its dependencies remain active, there is no ongoing development, bug fixes, or compatibility updates. For new projects, you should verify whether boto3's native request signing or other maintained alternatives better suit your needs.

Use it for:

• Sign requests to AWS services (S3, DynamoDB, etc.) when using the requests library instead of boto3 clients
• Authenticate custom HTTP calls to AWS API Gateway endpoints that require SigV4 signing
• Build lightweight HTTP clients for AWS services without pulling in the full boto3 SDK

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Adds AWS Signature Version 4 signing to requests library calls, enabling authenticated access to AWS API endpoints without manual signature construction.

No—the package is abandoned with no updates since June 2022. While it has low install friction and permissive licensing, the lack of maintenance creates risk for compatibility issues with current AWS APIs and Python versions. Use boto3's built-in request signing or an actively maintained alternative instead.

Install

requests-sigv4 on PyPI

pip install requests-sigv4

uv add requests-sigv4

poetry add requests-sigv4

Installing requests-sigv4

Before you install

Installation is straightforward with low friction, but the package is abandoned—last release was in June 2022 with no repository activity since. Relies on requests, requests-aws-sign, and boto3, all actively maintained, but the wrapper itself receives no updates.

License in practice

Licensed under Apache License 2.0 (permissive), so you can use it freely in commercial and open-source projects with minimal restrictions.

Quickstart

pip install requests-sigv4

import requests
from requests_sigv4 import AWS4Auth

auth = AWS4Auth('access_key', 'secret_key', 'region', 'service')
response = requests.get('https://api.example.amazonaws.com/path', auth=auth)

Verify before relying

• Whether the package works reliably with current versions of boto3 and requests, given no maintenance since 2022
• Whether AWS Signature Version 4 signing behavior matches current AWS API requirements
• Active alternatives or whether boto3's built-in signing is now the recommended approach

Package facts

Evidence: requests_sigv4-0.1.6-py3-none-any.whl

Keywords: aws, requests, sign, sigv4

Tags

More WWW/HTTP packages