When preparing a macOS machine in the cloud for CI/CD, you don’t always have access to the login screen, or you don’t want to access it. When using Secrets Manager for authentication, it is required to use it FROM THE SAME AWS REGION, for the list and download command. Apple might prompts you for a new authentication when connecting from a new IP address or location (switching between laptop and EC2 instance for example) When the session expires, you have to authenticate again. The session stays valid for several days, sometimes weeks before it expires. For example: you may authenticate interactively, using MFA, from your laptop, and have the command running unattended, from a script running on your cloud machine. The session token and cookies may be shared from multiple cloud machines. When using AWS Secrets Manager, Apple session token and cookies are securely stored on AWS Secrets Manager. The session token is stored in $HOME/.xcodeinstall or on AWS Secrets Manager. They are used to interact with Apple’s Developer Portal API and collect a session token. The Apple Developer Portal username and password ARE NOT STORED on the local volume. When MFA is configured (which we highly recommend), a human interaction is required to enter the MFA code sent to your device. (Instructions to configure this are below).

In unattended mode, it fetches your Apple Developer username and password from AWS Secrets Manager. In interactive mode, it prompts you for your Apple Developer account username, password and MFA code. Xcodeinstall is a command line utility to download and install Xcode from the terminal only. This project is licensed under the Apache 2.0 License. This is a command line utility to download and install Xcode in headless mode (from a Terminal only).

Brew install xcode