cloudquery / cq-provider-aws

CloudQuery Provider for AWS
https://cloudquery.io
Mozilla Public License 2.0
29 stars 40 forks source link

Assume Role in non `AWS` Partition #1176

Closed bbernays closed 2 years ago

bbernays commented 2 years ago

Describe the bug

If a user attempts to assume a role in a partition other than the AWS commercial partition CloudQuery will attempt to use the default region (us-east-1) which will fail because the credentials in the other partitions are not valid in the commercial regions

Expected Behavior

CloudQuery should have sensible defaults, but should enable users to override them

Steps to Reproduce

assume role in aws-gov region with no environment variables

Possible Solution

No response

Provider and CloudQuery version

all

Additional Context

No response

bbernays commented 2 years ago

As a workaround users can set AWS_REGION environment variable to the region they want to use for assuming the role. For example:

export AWS_REGION= us-gov-east-1