Skip to content

Conversation

@jmt-lab
Copy link
Contributor

@jmt-lab jmt-lab commented Oct 29, 2025

Issue #, if available: #213

Description of changes:
Similar to awslabs/tough#670
Adds the use of default credential chain and default region chains to enable support for using sts assume role through standard means such as the ~/.aws/config file

Testing Done
Created a build and then setup a role in another account and used a profile defined like

[profile sts-test]
role_arn = ...

I then used my build to download a snapshot using coldsnap --profile sts-test download ...

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@jmt-lab jmt-lab requested a review from bcressey October 29, 2025 23:31
@jmt-lab
Copy link
Contributor Author

jmt-lab commented Oct 29, 2025

Further context on testing:

  • Tested downloading snapshot in my account in region
  • Tested downloading snapshot in my account cross region
  • Tested downloading snapshot in another account via sts assume in region
  • Tested downloading snapshot in another account via sts assume cross region

@rpkelly
Copy link
Contributor

rpkelly commented Oct 29, 2025

With your testing, you were using configurations (other than the sts one, that's cool to add) that would have previously worked, right?

@jmt-lab
Copy link
Contributor Author

jmt-lab commented Oct 30, 2025

With your testing, you were using configurations (other than the sts one, that's cool to add) that would have previously worked, right?

Yes, i did a bunch of normal use downloads including no aws/config just using IMDS on my ec2 instance

@peterwaller-arm
Copy link

Ping. Would be good to be able to use this.

@jmt-lab jmt-lab merged commit 1967a1e into awslabs:develop Jan 12, 2026
2 checks passed
@jmt-lab jmt-lab deleted the sts-support branch January 12, 2026 19:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants