diff --git a/app-admin/awscli/Manifest b/app-admin/awscli/Manifest
index e819d04b45644..811139b6e3039 100644
--- a/app-admin/awscli/Manifest
+++ b/app-admin/awscli/Manifest
@@ -1,6 +1,7 @@
 DIST aws-cli-1.41.14.gh.tar.gz 2984605 BLAKE2B 50771f9995323b2c3ae3025887dc7d8309b899d8c3d6e2ed3176d9a17ea8b514fb5989dfe053a936c20f9fbe765ffbbf0adfad576ac5b85af17bfaf19a875505 SHA512 39cc3770bc994a058c9683e9134088fe1201cb1693c3de7fc3f0283966c0cf5e39a716df15b143f4f9ece8680e08479fc5a512257dc575183008806127534d4a
 DIST aws-cli-1.42.1.gh.tar.gz 2991474 BLAKE2B 32ebf86994739e081338aa16c1bbb3dca92c582494fcecd1053ca3e4f886b4a7e4d08b54d8ae2500054115e73c5bca3c81bec8c45f9e27614564453c231e5367 SHA512 684dbcd1bef9b03ad574842240c9c821e56556f0796dcacb9abfc4195a08ec767149bee183be96fef561188cccec7853be3a4d7f668a8071d8ac24d0584c7191
 DIST aws-cli-1.42.10.gh.tar.gz 2997458 BLAKE2B 1fefdc467e2cfbc04aaa069432b12b37eeeb822c1754f8d2e6c06b3ed98b7c4b9655167c7cca86416c13e3a7b007524cef9e2a8541fd78769a73e7e05c64df00 SHA512 29031677b0555150452ef43ad854a89f2ade40a376f0c68ac92e74b9a6f504563825983e3b7fb39db2fff6b859da661dc160cb88d0bb0479a50071afd2749847
+DIST aws-cli-1.42.11.gh.tar.gz 2997731 BLAKE2B eabfa9c8960a8823c42c6f769b62a690da401075789ddad02e1e8064b35f8892fd064a78b3ac48f8552687073a56fdce64ef85ea4fe5451c1c62ceb7c78211dd SHA512 6eb8e71e21a043f22325528c0289396095e20ae9355fdedfb32cda6b7210c431d1589f379d9601a4b0e0e5f558fa217ba9aac44db52d415ed498853a22ff1d48
 DIST aws-cli-1.42.6.gh.tar.gz 2993445 BLAKE2B 57166ba2409048626be42c5cc9b06f856fc26a43f7d1ae7fe650e6cfa32383c5745956e67f9fff5a019e2478ed9c5350c12acbe0fbc539db525baa4bd9ed91fa SHA512 f16265e7d12754f498fa52ea73f4b090ecc64cc1177aa154cf56e1eee80534702fd38155ebc8e8f61a3be4e03ea73a3814cc59ef2b4d5dc27452ee38ce758441
 DIST aws-cli-1.42.7.gh.tar.gz 2994006 BLAKE2B 213f66b95808eb6ba0140a321f213ec2b372f0054fadb3c29c8a3b5165e1164a85d982a87cd09ab2906b842ab848abd0e5ad1cf8fced5d714ecdd1b144f430c1 SHA512 377b3dc9692bae3911caa6f06799d5c34c640d2a5c76589eeea697d70e6fdfce115fee5956994648075e0f22104a4910738b87172173cbcab4fcc0e9b7c4d4d5
 DIST aws-cli-1.42.8.gh.tar.gz 2994506 BLAKE2B 9a769802362bacc19b256fadecfb151273f437a9462944b2b9f9397bf0cdf9f35545cf0d9a7e268db4106ded60333864033774b5b3fe96d5823ed9eb11a14249 SHA512 f6c9093a4b67fd9a5f5ba40bfe2fd66fe8592241abbf8dd81796c68c5afa37091ad17581153471f33aa34c5c165f2e25691578edb35b602be433bf0473d480d4
diff --git a/app-admin/awscli/awscli-1.42.11.ebuild b/app-admin/awscli/awscli-1.42.11.ebuild
new file mode 100644
index 0000000000000..ba1a897f1ae2a
--- /dev/null
+++ b/app-admin/awscli/awscli-1.42.11.ebuild
@@ -0,0 +1,92 @@
+# Copyright 1999-2025 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+DISTUTILS_USE_PEP517=setuptools
+PYTHON_COMPAT=( python3_{11..13} )
+
+inherit distutils-r1 shell-completion
+
+MY_P=aws-cli-${PV}
+DESCRIPTION="Universal Command Line Environment for AWS"
+HOMEPAGE="
+	https://github.com/aws/aws-cli/
+	https://pypi.org/project/awscli/
+"
+SRC_URI="
+	https://github.com/aws/aws-cli/archive/${PV}.tar.gz
+		-> ${MY_P}.gh.tar.gz
+"
+S=${WORKDIR}/${MY_P}
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~ppc64 ~riscv ~sparc ~x86"
+
+# botocore is x.(y-2).z, sigh
+BOTOCORE_PV="$(ver_cut 1).$(( $(ver_cut 2) - 2)).$(ver_cut 3-)"
+RDEPEND="
+	>=dev-python/botocore-${BOTOCORE_PV}[${PYTHON_USEDEP}]
+	dev-python/colorama[${PYTHON_USEDEP}]
+	dev-python/docutils[${PYTHON_USEDEP}]
+	dev-python/rsa[${PYTHON_USEDEP}]
+	>=dev-python/s3transfer-0.13.0[${PYTHON_USEDEP}]
+	dev-python/pyyaml[${PYTHON_USEDEP}]
+	!app-admin/awscli-bin
+"
+BDEPEND="
+	test? (
+		dev-python/packaging[${PYTHON_USEDEP}]
+	)
+"
+
+EPYTEST_PLUGINS=( pytest-forked )
+EPYTEST_XDIST=1
+distutils_enable_tests pytest
+
+src_prepare() {
+	# do not rely on bundled deps in botocore (sic!)
+	find -name '*.py' -exec sed -i \
+		-e 's:from botocore[.]vendored import:import:' \
+		-e 's:from botocore[.]vendored[.]:from :' \
+		{} + || die
+	# strip overzealous upper bounds on requirements
+	sed -i -e 's:,<[=0-9.]*::' -e 's:==:>=:' setup.py || die
+	distutils-r1_src_prepare
+}
+
+python_test() {
+	local serial_tests=(
+		tests/functional/ecs/test_execute_command.py::TestExecuteCommand::test_execute_command_success
+		tests/functional/ssm/test_start_session.py::TestSessionManager::test_start_session_{fails,success}
+		tests/functional/ssm/test_start_session.py::TestSessionManager::test_start_session_with_new_version_plugin_success
+		tests/unit/customizations/codeartifact/test_adapter_login.py::TestDotNetLogin::test_login_dotnet_sources_listed_with_backtracking
+		tests/unit/customizations/codeartifact/test_adapter_login.py::TestDotNetLogin::test_login_dotnet_sources_listed_with_backtracking_windows
+		tests/unit/customizations/codeartifact/test_adapter_login.py::TestNuGetLogin::test_login_nuget_sources_listed_with_backtracking
+		tests/unit/customizations/ecs/test_executecommand_startsession.py::TestExecuteCommand::test_execute_command_success
+		tests/unit/customizations/test_sessionmanager.py
+		tests/unit/test_compat.py::TestIgnoreUserSignals
+		tests/unit/test_help.py
+		tests/unit/test_utils.py::TestIgnoreCtrlC::test_ctrl_c_is_ignored
+	)
+	EPYTEST_XDIST= epytest "${serial_tests[@]}"
+
+	local EPYTEST_DESELECT=(
+		"${serial_tests[@]}"
+
+		# flaky (some ordering?)
+		tests/functional/s3/test_cp_command.py::TestCPCommand::test_multipart_upload_with_checksum_algorithm_crc32
+	)
+	# integration tests require AWS credentials and Internet access
+	epytest tests/{functional,unit}
+}
+
+python_install_all() {
+	newbashcomp bin/aws_bash_completer aws
+	newzshcomp bin/aws_zsh_completer.sh _aws
+
+	distutils-r1_python_install_all
+
+	rm "${ED}"/usr/bin/{aws.cmd,aws_bash_completer,aws_zsh_completer.sh} || die
+}