I’m having some trouble with providers. I do not want to use the aws user logged in on my computer, but pass a secret and access key from code. I figured this would work

const provider = new aws.Provider('aws', {region: 'eu-west-3',secretKey: 'm/XXX/xxxxx',accessKey: 'XXXXX' });
const cluster = new eks.Cluster('my-cluster',{...},{ provider });

but it deploys using the user on my computer. What am I missing?

Pulumi allows credentials (KUBECONFIG, AWS_ACCESS_KEY_ID, etc) to be overridden by environment variables. From https://www.pulumi.com/docs/intro/cloud-providers/aws/setup/#environment-variables, "Although credentials are recommended, the SDK will prefer environment variables over any other settings". If you unset your AWS environment variables I would expect Pulumi to use the configured settings as described on the setup page.