This message was deleted.

I figured it out. I also use aws-vault and I found that works with pulum like

aws-vault exec myprofile -- pulumi preview

Nice trick! Do you use that on Windows and how is the experience, if so?

Setting the AWS_PROFILE environment variable works for me on Mac, but I know some of my colleagues on Windows have had trouble with this (and just use temporary credentials generated by aws sts assume-role which they can put directly into AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN env vars).