auth_with_role_name add region_name arg for cross-account sts

This commit is contained in:
An Tang 2026-02-19 17:38:31 -08:00
parent deeaae7e10
commit c51696ddda

View file

@ -234,6 +234,7 @@ class BaseAWSLLM:
aws_session_token=aws_session_token,
aws_role_name=aws_role_name,
aws_session_name=aws_session_name,
aws_region_name=aws_region_name,
aws_external_id=aws_external_id,
ssl_verify=ssl_verify,
)
@ -867,6 +868,7 @@ class BaseAWSLLM:
aws_session_token: Optional[str],
aws_role_name: str,
aws_session_name: str,
aws_region_name: Optional[str] = None,
aws_external_id: Optional[str] = None,
ssl_verify: Optional[Union[bool, str]] = None,
) -> Tuple[Credentials, Optional[int]]:
@ -943,12 +945,15 @@ class BaseAWSLLM:
if aws_access_key_id is None and aws_secret_access_key is None:
with tracer.trace("boto3.client(sts)"):
sts_client = boto3.client(
"sts", verify=self._get_ssl_verify(ssl_verify)
"sts",
region_name=aws_region_name,
verify=self._get_ssl_verify(ssl_verify)
)
else:
with tracer.trace("boto3.client(sts)"):
sts_client = boto3.client(
"sts",
region_name=aws_region_name,
aws_access_key_id=aws_access_key_id,
aws_secret_access_key=aws_secret_access_key,
aws_session_token=aws_session_token,