Merge pull request #46 from aws/fix/RolesAnywhere-4716

Fix empty credential output when TA and Profile ARN regions don't match
aws · Aug 16, 2023 · 5395f57 · 5395f57
2 parents 26e253e + b593748
commit 5395f57
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/Makefile b/Makefile
@@ -1,4 +1,4 @@
-VERSION=1.0.5
+VERSION=1.0.6
 
 release:
 	go build -buildmode=pie -ldflags "-X 'github.com/aws/rolesanywhere-credential-helper/cmd.Version=${VERSION}' -linkmode=external -w -s" -trimpath -o build/bin/aws_signing_helper main.go

diff --git a/aws_signing_helper/credentials.go b/aws_signing_helper/credentials.go
@@ -45,7 +45,7 @@ func GenerateCredentials(opts *CredentialsOpts, signer Signer, signatureAlgorith
 	}
 
 	if trustAnchorArn.Region != profileArn.Region {
-		return CredentialProcessOutput{}, err
+		return CredentialProcessOutput{}, errors.New("trust anchor and profile regions don't match")
 	}
 
 	if opts.Region == "" {