This release focuses on better Keychain security;
- Prevent
security
/aws-keychain
from being whitelisted to access Keychain items. #13 - Store in a separate
aws-keychain.keychain
instead of the always-unlockedlogin.keychain
. #15- Override with
AWS_KEYCHAIN_FILE
environment variable. aws-keychain migrate
moves items fromlogin.keychain
toaws-keychain.keychain
.
- Override with
Keychain Access (which ships with Mac OS X) can be used to adjust the auto-lock parameters on the new keychain file. It is recommended that you don't “Always allow” when prompted. You can hit spacebar to allow access when prompted while the keychain is unlocked.