electron-userland / electron-userland/electron-builder

S3 publisher no longer resolves credentials from ~/.aws/config

Open
#10,054 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
14.7k
Forks
1.9k
Avg merge
3d 12h
Merged PRs (30d)
48

Description

Changed in 26.13.0 with the the move to a JS based S3 publisher
he previous AWS go SDK used to also check `~/.aws/config` for credentials, if the ` AWS_SDK_LOAD_CONFIG=1` is set.
this breaks existing pathway if you were using IAM Identity Center / SSO sessions for authenticating into AWS.

docs still point to this as being a supported feature: https://www.electron.build/docs/publish/#s3

previous related ticket where this auth pathway was added to the docs: https://github.com/electron-userland/electron-builder/pull/9018

not sure if the regression was intentional or if the docs need to be updated to reflect this.

Contributor guide

Open the contributing guide

Research direction

Start by comparing the current JS-based S3 publisher's credential loading with the previous Go SDK behavior, using AWS_SDK_LOAD_CONFIG=1 and an IAM Identity Center/SSO session. Inspect the S3 publishing documentation and linked PR 9018; done means either restoring supported config resolution with appropriate coverage or updating the docs to match confirmed behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, release
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
55/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.