AWS-CONFIG-D

Summary from the TLDR InfoSec newsletter

aws-config-d splits the monolithic ~/.aws/config file into per-organization files under a config.d/ directory, automatically concatenating them via a shell hook on session start — useful for security teams and consultants managing SSO profiles across multiple AWS organizations. The tool includes SHA-256 drift detection that warns when external changes (such as aws configure sso) modify the config outside the managed workflow, preventing silent overwrites of carefully scoped access configurations. It supports bash, zsh, and fish with zero dependencies and ships with 42 containerized tests covering rebuild triggers, migration, and idempotency.