Hi, just wondering if AWS default profiles are expected to work? I’ve got a named profile in

~/.aws/credentials

, but unless I move it to

default

, commands like

pulumi update

fail with

error: error validating provider credentials: error calling stsGetCallerIdentity InvalidClientTokenId: The security token included in the request is invalid.

I have a couple of named profiles and it works. Specifically

AWS_PROFILE=test pulumi up

works

Ah, thanks. Yes, that works. I forgot to mention I exported

AWS_DEFAULT_PROFILE

, then ran

pulumi update

unadorned. That didn’t work.

Great it worked for you!

Yes, your suggestion worked. Thank you! Still have a question about using

AWS_DEFAULT_PROFILE

, which doesn’t work. Might not be implemented.

I believe we ultimately rely on the underlying aws-sdk-go library for this. So if it's supported there, I think it should work in Pulumi. Unfortunately I'm not familiar with the never-ending list of ways that AWS does auth, hehe.

Thanks @gentle-diamond-70147. I’ll read that code and see what’s what.

@lemon-wall-81522 you can also add them via

pulumi config set

, and they vary by stack.

pulumi config set aws:region us-east-1
pulumi config set aws:profile someprofile.role

Good idea. The only thing I’m using that for right now is specify a region.