AWS cli plugin session-manager-plugin cannot be used on macOS without workaround

[programmer04]

• I've gone though the User Guide and the API reference
• I've searched for previous similar issues and didn't find any solution

Describe the bug
AWS cli plugin session-manager-plugin is not notarized by Apple, so after fresh installation, it cannot be open:

The workaround described here solves the issue and the program works, but basically, the user has to bypass macOS default security checks to get it run, which is not nice.

SDK version number
I tried with two last versions of session-manager-plugin:

• 1.2.30.0
• 1.2.7.0

Platform/OS/Hardware/Device

• macOS Big Sur Version 11.0.1 (but I'm sure that on Catalina would be the same)

To Reproduce (observed behavior)
Just try to run session-manager-plugin after fresh installation (without workaround) e.g.

session-manager-plugin --version

Expected behavior
This binary should work out of the box.

Additional context
Many other projects resolved it in the past e.g.:

• Hashicorp

[kdaily]

Hi @programmer04, thanks for the report. I don't have Big Sur in order to test this, but I will check in with the SSM team.

[skyzyx]

This happens when its installed via Homebrew instead of manually installing it from the AWS website.

It would be wonderful if AWS could work with the Homebrew folks, so that AWS can publish the source that Homebrew uses for these packages.

It would resolve a great many issues in the ecosystem around AWS.

[programmer04]

Unfortunately, this issue still exists for the current newest version 1.2.54.0

[kdaily]

Is this still an issue for you, @programmer04? Can you confirm what @skyzyx noted is that it occurs when installed via Homebrew? If you install via one of the supported installation mechanisms, does it still occur?

@skyzyx, I appreciate the feedback. We have proposed a new source distribution (#6352) that addresses package maintainers ability to build from source. The Homebrew team is aware of this proposal.

[programmer04]

It occurs when is not installed from pkg (which is notarized) available since version

1.2.205.0 | June 10, 2021 | Enhancement: Added support for signed macOS installer.

thanks for introducing this notarized pkg.

Hence I'm prosing changes in the formula Homebrew/homebrew-cask#113686 to install AWS session-manager-plugin from notarized pkg instead of zip. Please check it, it'll resolve this issue.

Moreover, @kdaily could the AWS team bump the version in this formula always when the new session-manager-plugin is released? It'd be very convenient to have always the newest version basically out of the box when brew is used as package manager.

[programmer04]

My PR Homebrew/homebrew-cask#113686 has been already merged. Thus this issue can be considered as resolved.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one. If you wish to keep having a conversation with other community members under this issue feel free to do so.