Skip to content

Conversation

@sbiscigl
Copy link
Contributor

Issue #, if available:

#3600

Description of changes:

Fixes two problems:

  • The STSWebIdentityCredentialsProvider used a typo-ed version of two env vars, AWS_IAM_ROLE_ARN and AWS_IAM_ROLE_SESSION_NAME. this changes the provider to use the correct AWS_ROLE_ARN and AWS_ROLE_SESSION_NAME . In addition it provides backwards compatibility to the old typo-ed names.
  • The function LoadConfigFromEnvOrProfile will call ToLower on any environment variable loaded, which is incorrect for the env var AWS_IAM_ROLE_ARN as arns can contain case sensitive values. This is likely a greater issue across other configurations, but fixing for the STS web identity provider for now.

Check all that applies:

  • Did a review by yourself.
  • Added proper tests to cover this PR. (If tests are not applicable, explain.)
  • Checked if this PR is a breaking (APIs have been changed) change.
  • Checked if this PR will not introduce cross-platform inconsistent behavior.
  • Checked if this PR would require a ReadMe/Wiki update.

Check which platforms you have built SDK on to verify the correctness of this PR.

  • Linux
  • Windows
  • Android
  • MacOS
  • IOS
  • Other Platforms

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@sbiscigl sbiscigl marked this pull request as ready for review October 29, 2025 14:53
@sbiscigl sbiscigl force-pushed the sts-creds-env-fix branch 7 times, most recently from 523de48 to 6357a86 Compare October 30, 2025 17:21
@sbiscigl sbiscigl merged commit 63ad6e3 into main Oct 30, 2025
5 checks passed
@sbiscigl sbiscigl deleted the sts-creds-env-fix branch October 30, 2025 22:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants