From c51696ddda3c5126f2d923bdea7f76ab22286b02 Mon Sep 17 00:00:00 2001 From: An Tang Date: Thu, 19 Feb 2026 17:38:31 -0800 Subject: [PATCH] auth_with_role_name add region_name arg for cross-account sts --- litellm/llms/bedrock/base_aws_llm.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/litellm/llms/bedrock/base_aws_llm.py b/litellm/llms/bedrock/base_aws_llm.py index dfaddb3c2b1..aa35c30a0b2 100644 --- a/litellm/llms/bedrock/base_aws_llm.py +++ b/litellm/llms/bedrock/base_aws_llm.py @@ -234,6 +234,7 @@ class BaseAWSLLM: aws_session_token=aws_session_token, aws_role_name=aws_role_name, aws_session_name=aws_session_name, + aws_region_name=aws_region_name, aws_external_id=aws_external_id, ssl_verify=ssl_verify, ) @@ -867,6 +868,7 @@ class BaseAWSLLM: aws_session_token: Optional[str], aws_role_name: str, aws_session_name: str, + aws_region_name: Optional[str] = None, aws_external_id: Optional[str] = None, ssl_verify: Optional[Union[bool, str]] = None, ) -> Tuple[Credentials, Optional[int]]: @@ -943,12 +945,15 @@ class BaseAWSLLM: if aws_access_key_id is None and aws_secret_access_key is None: with tracer.trace("boto3.client(sts)"): sts_client = boto3.client( - "sts", verify=self._get_ssl_verify(ssl_verify) + "sts", + region_name=aws_region_name, + verify=self._get_ssl_verify(ssl_verify) ) else: with tracer.trace("boto3.client(sts)"): sts_client = boto3.client( "sts", + region_name=aws_region_name, aws_access_key_id=aws_access_key_id, aws_secret_access_key=aws_secret_access_key, aws_session_token=aws_session_token,