# Edge components release with Aembit CLI and Secrets Operator updates

Aembit has released new versions of the following components and packages:

* Aembit Secrets Operator
* Aembit Secrets Operator Helm chart

For the latest available versions of these components, see the [Edge Components Supported Versions](/reference/edge-components/edge-component-supported-versions) page.

Key Updates:

* **AWS and Kubernetes Trust Provider attestation in Aembit CLI**: The `aembit credentials get` command now supports the AWS Metadata Service, AWS Role, and Kubernetes Service Account Trust Providers. Aembit CLI gathers attestation data from the local environment—instance metadata, an STS `GetCallerIdentity` request, or the projected service account token—so an externally supplied [`--id-token`](/dev-guide/cli/reference/credentials-get#--id-token) isn’t needed for these Trust Providers. The [`--deployment-model`](/dev-guide/cli/reference/credentials-get#--deployment-model) option now accepts `vm`, `kubernetes`, `ecs_fargate`, and `lambda_container`. The AWS Role Trust Provider requires this option.
* **Aembit Secrets Operator credential type support**: Secrets Operator 1.32.322 now retrieves any credential type your Access Policy issues, not just HashiCorp Vault tokens. See [Aembit Secrets Operator now supports more credential types](/changelog/entry/2026-06-04-aembit-secrets-operator-now-supports-more-credential-types).