---
id: requests-sigv4
version: "0.1.6"
license: Apache License 2.0
license_treatment: permissive
maintenance: abandoned
---

# requests-sigv4 — Library for making sigv4 requests to AWS API endpoints

License: permissive · Maintenance: abandoned · Downloads: 2.4M/mo

## What it is and what it does

requests-sigv4 is a thin wrapper that integrates AWS Signature Version 4 signing into the requests library. It takes AWS credentials and request details, constructs a valid SigV4 signature, and attaches it to outgoing HTTP requests so they authenticate against AWS API endpoints. The package depends on requests for HTTP transport, boto3 for credential handling, and requests-aws-sign for the actual signing logic.

The package was last updated in June 2022 and is no longer maintained. While it still installs and its dependencies remain active, there is no ongoing development, bug fixes, or compatibility updates. For new projects, you should verify whether boto3's native request signing or other maintained alternatives better suit your needs.

Use it for:

- Sign requests to AWS services (S3, DynamoDB, etc.) when using the requests library instead of boto3 clients
- Authenticate custom HTTP calls to AWS API Gateway endpoints that require SigV4 signing
- Build lightweight HTTP clients for AWS services without pulling in the full boto3 SDK

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Adds AWS Signature Version 4 signing to requests library calls, enabling authenticated access to AWS API endpoints without manual signature construction.

No—the package is abandoned with no updates since June 2022. While it has low install friction and permissive licensing, the lack of maintenance creates risk for compatibility issues with current AWS APIs and Python versions. Use boto3's built-in request signing or an actively maintained alternative instead.

## Install

pip install requests-sigv4
uv add requests-sigv4
poetry add requests-sigv4

## Installing requests-sigv4

Before you install: Installation is straightforward with low friction, but the package is abandoned—last release was in June 2022 with no repository activity since. Relies on requests, requests-aws-sign, and boto3, all actively maintained, but the wrapper itself receives no updates.

License in practice: Licensed under Apache License 2.0 (permissive), so you can use it freely in commercial and open-source projects with minimal restrictions.

Quickstart:

pip install requests-sigv4

import requests
from requests_sigv4 import AWS4Auth

auth = AWS4Auth('access_key', 'secret_key', 'region', 'service')
response = requests.get('https://api.example.amazonaws.com/path', auth=auth)

Verify before relying:

- Whether the package works reliably with current versions of boto3 and requests, given no maintenance since 2022
- Whether AWS Signature Version 4 signing behavior matches current AWS API requirements
- Active alternatives or whether boto3's built-in signing is now the recommended approach

## Package facts

- License: Apache License 2.0 (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: abandoned
- Downloads: 2.4M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

aws sigv4 signing, requests aws authentication, boto3 request signing, aws api endpoint auth, sigv4 request library, aws-auth, abandoned

[View on SkillFed](https://skillfed.io/packages/requests-sigv4) · [View on PyPI](https://pypi.org/project/requests-sigv4/)