audit-labs/audit-tools

A collection of scripts, queries, and other goodies you can use in an audit.

clone: git clone https://gitbay.org/audit-labs/audit-tools.git

10926295254e13a19dbdbb170da484a11aa22c81

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-07-29T17:20:33Z

fix: require botocore[crt] for aws login / SSO credentials

The AWS collectors import botocore directly, and credentials from `aws login` /
IAM Identity Center use the AWS Common Runtime (CRT) credential provider, which
needs the `crt` extra (awscrt). Without it, any AWS call fails with
MissingDependencyException. Declare botocore[crt] and document the requirement.

 applications/aws/README.md | 6 ++++++
 requirements.txt           | 1 +
 2 files changed, 7 insertions(+)

diff --git a/applications/aws/README.md b/applications/aws/README.md
index ebb2c1e..4e09960 100644
--- a/applications/aws/README.md
+++ b/applications/aws/README.md
@@ -23,6 +23,12 @@ export AWS_DEFAULT_REGION=us-east-1    # optional
 export AWS_AUDIT_ACCOUNT=my-account    # optional; only for the SSO check
 ```
 
+If you authenticate with `aws login` / IAM Identity Center (SSO), those
+credentials use the AWS Common Runtime provider, which needs the `crt` extra.
+It is included via `botocore[crt]` in `requirements.txt`; if you installed
+boto3 separately, run `pip install "botocore[crt]"`. Without it you'll see
+`MissingDependencyException: ... requires an additional dependency`.
+
 ## Usage
 
 ```bash
diff --git a/requirements.txt b/requirements.txt
index f465d14..7cad7ad 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,6 +5,7 @@ PyYAML
 pytest
 requests
 boto3
+botocore[crt]
 textual
 dash
 plotly