{"adoption": {"forks": 453, "observed_at": "2026-08-28T04:06:37.827217+00:00", "stars": 2332}, "canonical_url": "https://ross.abutalabs.com/products/aws-iam-authenticator", "card": {"archived": false, "artifact_type": "cli-tool", "description": "A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster", "domain": ["security", "cloud-computing", "developer-tools"], "enriched": true, "function": ["auth", "security", "cli"], "health_score": 100, "homepage": null, "language": "Go", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["kubernetes-sigs/aws-iam-authenticator"], "name": "kubernetes-sigs/aws-iam-authenticator", "platform": ["windows", "cloud", "go", "cli"], "pushed_at": "2026-08-24T13:07:42+00:00", "repo": "kubernetes-sigs/aws-iam-authenticator", "stars": 2332, "tags": ["kubernetes", "aws-iam", "eks", "authentication", "kubectl", "cloudtrail", "daemonset", "containers", "linux", "macos"], "topics": ["kubernetes", "iam", "aws", "auth", "k8s-sig-aws"], "urls": [], "use_cases": ["authenticate to kubernetes cluster with aws iam credentials", "avoid managing separate kubernetes admin certificates on eks", "map aws iam roles to kubernetes users and groups", "get cloudtrail audit trail for kubernetes api access", "bootstrap kubernetes cluster admin access during provisioning", "enforce mfa for kubernetes cluster access"], "what_it_is": "A tool that lets users authenticate to Kubernetes clusters using AWS IAM credentials instead of separate certificates or tokens. It runs as a server (typically a DaemonSet) that validates IAM-signed tokens for the Kubernetes API server, and ships a client for generating those tokens for kubectl.", "when_to_avoid": ["your cluster is not on aws or you do not use aws iam", "you need authentication against other identity providers like oidc, ldap, or github", "you want a general-purpose kubernetes auth proxy rather than iam-specific token validation"], "when_to_choose": ["your kubernetes cluster runs on aws and you already manage iam credentials", "you want centralized identity and audit logging via cloudtrail", "you are building a kubernetes installer on aws and want to avoid smuggling initial admin credentials"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/aws-iam-authenticator", "repo": "kubernetes-sigs/aws-iam-authenticator", "role": "main", "score": 99}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:37.827217+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:37:57.111689+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7210c0bde63936f61be53a581ca0dff572c7a5a14d64a6c6393e225b6d1bc643", "fetched_at": "2026-08-28T04:06:37.827217+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kubernetes-sigs/aws-iam-authenticator"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 99}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 3319, "days_push": 9, "days_rel": 7, "gap_med": 25.5, "n_releases_24m": 25}, "score": 99, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}