Don't require AWS_ROLE_SESSION_NAME to sts:AssumeRoleWithWebIdentity (#…

…9416) (#9476) Fixes #9415 Co-authored-by: Theron Voran <[email protected]> Co-authored-by: Ori Rawlings <[email protected]>
hashicorp · Jul 14, 2020 · 39f1a3e · 39f1a3e
1 parent 022a563
commit 39f1a3e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sdk/helper/awsutil/generate_credentials.go b/sdk/helper/awsutil/generate_credentials.go
@@ -62,7 +62,7 @@ func (c *CredentialsConfig) GenerateCredentialChain() (*credentials.Credentials,
 	roleARN := os.Getenv("AWS_ROLE_ARN")
 	tokenPath := os.Getenv("AWS_WEB_IDENTITY_TOKEN_FILE")
 	sessionName := os.Getenv("AWS_ROLE_SESSION_NAME")
-	if roleARN != "" && tokenPath != "" && sessionName != "" {
+	if roleARN != "" && tokenPath != "" {
 		// this session is only created to create the WebIdentityRoleProvider, as the env variables are already there
 		// this automatically assumes the role, but the provider needs to be added to the chain
 		sess, err := session.NewSession()