Has anyone faced this?

Are you using named profiles? (is aws:profile set?), if so, you have to provide

providerCredentialOpts

like so:

providerCredentialOpts: {
        profileName: aws.config.profile,
        roleArn: yourRoleHere.arn
      },

Thank you!