As of this PR: https://github.com/camptocamp/terraboard/pull/177 AWS Default Credentials Provider is never used so now we're forced to either pass in an access key/secret key or pass in a role to assume. However, the default credentials provider is much more flexible: https://aws.github.io/aws-sdk-go-v2/docs/configuring-sdk/#specifying-credentials In our case, we use web identity auth which is now broken.