Fix assumerole

piyushroshan · piyushroshan · commit c0b3546bc9c3 · 2026-02-06T14:35:12.000+05:30
diff --git a/services/chatbot/src/chatbot/aws_credentials.py b/services/chatbot/src/chatbot/aws_credentials.py
@@ -35,10 +35,11 @@ def _get_base_session():
         "Creating base boto3 session - region: %s, has_access_key: %s, has_secret_key: %s, has_session_token: %s",
         region, has_access_key, has_secret_key, has_session_token
     )
+    # Use None for empty strings so boto3 falls back to instance profile/IRSA
     return boto3.Session(
-        aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID"),
-        aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY"),
-        aws_session_token=os.getenv("AWS_SESSION_TOKEN"),
+        aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID") or None,
+        aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY") or None,
+        aws_session_token=os.getenv("AWS_SESSION_TOKEN") or None,
         region_name=region,
     )
 

Original file line number	Diff line number	Diff line change
`@@ -35,10 +35,11 @@ def _get_base_session():`
`35`	`35`	`"Creating base boto3 session - region: %s, has_access_key: %s, has_secret_key: %s, has_session_token: %s",`
`36`	`36`	`region, has_access_key, has_secret_key, has_session_token`
`37`	`37`	`)`
	`38`	`+ # Use None for empty strings so boto3 falls back to instance profile/IRSA`
`38`	`39`	`return boto3.Session(`
`39`		`- aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID"),`
`40`		`- aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY"),`
`41`		`- aws_session_token=os.getenv("AWS_SESSION_TOKEN"),`
	`40`	`+ aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID") or None,`
	`41`	`+ aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY") or None,`
	`42`	`+ aws_session_token=os.getenv("AWS_SESSION_TOKEN") or None,`
`42`	`43`	`region_name=region,`
`43`	`44`	`)`
`44`	`45`