s3 module source does not support AWS_PROFILE authentication

[matt-mercer]

Terraform Version

Terraform v1.12.2
on linux_amd64

Terraform Configuration Files

module "aws-metrics" {
  source = "s3::https://my-bucket/some-module-v1.0.21.zip"
}

Debug Output

 Error: Failed to download module
│ 
│   on main.tf line 255:
│  255: module "aws-metrics" {
│ 
│ Could not download module "aws-metrics" (main.tf:255) source code from
│ "s3::https://my-bucket/some-module-v1.0.21.zip": NoCredentialProviders: no valid
│ providers in chain
│ caused by: EnvAccessKeyNotFound: AWS_ACCESS_KEY_ID or AWS_ACCESS_KEY not found in environment
│ SharedCredsLoad: failed to get profile
│ EC2RoleRequestError: no EC2 instance role found
│ caused by: RequestError: send request failed
│ caused by: Get "http://169.254.169.254/latest/meta-data/iam/security-credentials/": context deadline exceeded (Client.Timeout exceeded while
│ awaiting headers)

Expected Behavior

Creddentials provided using AWS_PROFILE environment variable should be used in authentication against s3 for module retrieval

Actual Behavior

Module source does not respect AWS_PROFILE

Steps to Reproduce

1. terraform init

Additional Context

No response

References

No response

Generative AI / LLM assisted development?

No response

[matt-mercer]

actually, looking at this further, this could also be a failure related to SSO authentication ... default credentials in ~/.aws/credntials are valid and have required access , but do contain contain aws_session_token

[crw]

Thanks for this report. I've notified the AWS Provider team at HashiCorp, an IBM company, who are the primary maintainers of the s3 backend in the core repo.