This message was deleted.

I've found a way to do it, but is there a "default" way instead of using an "explicit" one :

assumerole = aws.Provider("aviatrixrole", 
                                region="eu-west-1",
                               assume_role=aws.ProviderAssumeRoleArgs(role_arn="arn:aws:iam::1111111:role/myrole"))

    site_bucket = s3.Bucket("s3-website-bucket", 
                            website=s3.BucketWebsiteArgs(index_document="index.html"), 
                            opts=pulumi.ResourceOptions(provider=assumerole))

There’s an

assumeRole

config setting you can use for default providers: https://www.pulumi.com/registry/packages/aws/installation-configuration/#configuration-options

this

stack.set_config("assumeRole.roleArn", auto.ConfigValue(value="arn:aws:iam::11111:role/myrole"))

doesn't work either. It still create my S3 bucket on my current account

it needs to be

stack.set_config("aws:assumeRole.roleArn", auto.ConfigValue(value="arn:aws:iam::11111:role/myrole"))

(note the

aws

in front of the

assumeRole

)

You're right. Strange, because pulumi generate errors :

pulumi:pulumi:Stack inline_s3_project-dev running
    aws:s3:Bucket s3-website-bucket  error: could not validate provider configuration: 1 error occurred:
    pulumi:pulumi:Stack inline_s3_project-dev
    aws:s3:Bucket s3-website-bucket **failed** 1 error

Diagnostics:
  aws:s3:Bucket (s3-website-bucket):
    error: could not validate provider configuration: 1 error occurred:
    	* Invalid or unknown key

is that what you’re getting with the

aws

in front?

Yes

I think you might need to set the

externalId

and the

sessionId

names in the config as well if you’re using assumeRole (not 100% sure on this, but worth a try) - that might be why you’re getting that error).

@brave-planet-10645 it's expected or a bug ?

what, for the default provider to ignore it without the

aws

at the beginning? It’s expected: https://www.pulumi.com/docs/intro/concepts/config/#configuration-keys

I've set the

aws:

in prefix, but pulumi crash when I set this config value

stack.set_config(
            "aws:assumeRole",
            auto.ConfigValue(
                json.dumps(
                    {
                        "roleArn": "arn:aws:iam::11111111111:role/myrole",
                        "sessionName": "session-assume-myrole",
                    }
                )
            ),
        )

I can't remember where I found this, but I did it this way and it worked.