Provider

AWS v5.43.0 (5.x), Mar 10 26

Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi

Go to latest version

Schema (JSON)

pulumi/pulumi-aws

Viewing docs for AWS v5.43.0 (Older version)
published on Tuesday, Mar 10, 2026 by Pulumi

Go to latest version

Schema (JSON)

pulumi/pulumi-aws

The provider type for the aws package. By default, resources use package-wide configuration settings, however an explicit Provider instance may be created and passed during resource construction to achieve fine-grained programmatic control over provider settings. See the documentation for more information.

Create Provider Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Provider(name: string, args?: ProviderArgs, opts?: CustomResourceOptions);

@overload
def Provider(resource_name: str,
             args: Optional[ProviderArgs] = None,
             opts: Optional[ResourceOptions] = None)

@overload
def Provider(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             access_key: Optional[str] = None,
             allowed_account_ids: Optional[Sequence[str]] = None,
             assume_role: Optional[ProviderAssumeRoleArgs] = None,
             assume_role_with_web_identity: Optional[ProviderAssumeRoleWithWebIdentityArgs] = None,
             custom_ca_bundle: Optional[str] = None,
             default_tags: Optional[ProviderDefaultTagsArgs] = None,
             ec2_metadata_service_endpoint: Optional[str] = None,
             ec2_metadata_service_endpoint_mode: Optional[str] = None,
             endpoints: Optional[Sequence[ProviderEndpointArgs]] = None,
             forbidden_account_ids: Optional[Sequence[str]] = None,
             http_proxy: Optional[str] = None,
             ignore_tags: Optional[ProviderIgnoreTagsArgs] = None,
             insecure: Optional[bool] = None,
             max_retries: Optional[int] = None,
             profile: Optional[str] = None,
             region: Optional[str] = None,
             s3_force_path_style: Optional[bool] = None,
             s3_use_path_style: Optional[bool] = None,
             secret_key: Optional[str] = None,
             shared_config_files: Optional[Sequence[str]] = None,
             shared_credentials_file: Optional[str] = None,
             shared_credentials_files: Optional[Sequence[str]] = None,
             skip_credentials_validation: Optional[bool] = None,
             skip_get_ec2_platforms: Optional[bool] = None,
             skip_metadata_api_check: Optional[bool] = None,
             skip_region_validation: Optional[bool] = None,
             skip_requesting_account_id: Optional[bool] = None,
             sts_region: Optional[str] = None,
             token: Optional[str] = None,
             use_dualstack_endpoint: Optional[bool] = None,
             use_fips_endpoint: Optional[bool] = None)

func NewProvider(ctx *Context, name string, args *ProviderArgs, opts ...ResourceOption) (*Provider, error)

public Provider(string name, ProviderArgs? args = null, CustomResourceOptions? opts = null)

public Provider(String name, ProviderArgs args)
public Provider(String name, ProviderArgs args, CustomResourceOptions options)

type: pulumi:providers:aws
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ProviderArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Provider Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Provider resource accepts the following input properties:

AccessKey string: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
AllowedAccountIds List<string>
AssumeRole ProviderAssumeRole
AssumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
CustomCaBundle string: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
DefaultTags ProviderDefaultTags: Configuration block with settings to default resource tags across all resources.
Ec2MetadataServiceEndpoint string: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
Ec2MetadataServiceEndpointMode string: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
Endpoints List<ProviderEndpoint>
ForbiddenAccountIds List<string>
HttpProxy string: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
IgnoreTags ProviderIgnoreTags: Configuration block with settings to ignore resource tags across all resources.
Insecure bool: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
MaxRetries int: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
Profile string: The profile for API operations. If not set, the default profile created with aws configure will be used.
Region string: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
S3ForcePathStyle bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
S3UsePathStyle bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
SecretKey string: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
SharedConfigFiles List<string>: List of paths to shared config files. If not set, defaults to [~/.aws/config].
SharedCredentialsFile string: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
SharedCredentialsFiles List<string>: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
SkipCredentialsValidation bool: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
SkipGetEc2Platforms bool: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
SkipMetadataApiCheck bool: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
SkipRegionValidation bool: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
SkipRequestingAccountId bool: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
StsRegion string: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
Token string: session token. A session token is only required if you are using temporary security credentials.
UseDualstackEndpoint bool: Resolve an endpoint with DualStack capability
UseFipsEndpoint bool: Resolve an endpoint with FIPS capability

AccessKey string: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
AllowedAccountIds []string
AssumeRole ProviderAssumeRoleArgs
AssumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentityArgs
CustomCaBundle string: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
DefaultTags ProviderDefaultTagsArgs: Configuration block with settings to default resource tags across all resources.
Ec2MetadataServiceEndpoint string: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
Ec2MetadataServiceEndpointMode string: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
Endpoints []ProviderEndpointArgs
ForbiddenAccountIds []string
HttpProxy string: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
IgnoreTags ProviderIgnoreTagsArgs: Configuration block with settings to ignore resource tags across all resources.
Insecure bool: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
MaxRetries int: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
Profile string: The profile for API operations. If not set, the default profile created with aws configure will be used.
Region string: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
S3ForcePathStyle bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
S3UsePathStyle bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
SecretKey string: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
SharedConfigFiles []string: List of paths to shared config files. If not set, defaults to [~/.aws/config].
SharedCredentialsFile string: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
SharedCredentialsFiles []string: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
SkipCredentialsValidation bool: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
SkipGetEc2Platforms bool: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
SkipMetadataApiCheck bool: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
SkipRegionValidation bool: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
SkipRequestingAccountId bool: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
StsRegion string: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
Token string: session token. A session token is only required if you are using temporary security credentials.
UseDualstackEndpoint bool: Resolve an endpoint with DualStack capability
UseFipsEndpoint bool: Resolve an endpoint with FIPS capability

accessKey String: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
allowedAccountIds List<String>
assumeRole ProviderAssumeRole
assumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
customCaBundle String: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
defaultTags ProviderDefaultTags: Configuration block with settings to default resource tags across all resources.
ec2MetadataServiceEndpoint String: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
ec2MetadataServiceEndpointMode String: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
endpoints List<ProviderEndpoint>
forbiddenAccountIds List<String>
httpProxy String: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
ignoreTags ProviderIgnoreTags: Configuration block with settings to ignore resource tags across all resources.
insecure Boolean: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
maxRetries Integer: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
profile String: The profile for API operations. If not set, the default profile created with aws configure will be used.
region String: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
s3ForcePathStyle Boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
s3UsePathStyle Boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
secretKey String: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
sharedConfigFiles List<String>: List of paths to shared config files. If not set, defaults to [~/.aws/config].
sharedCredentialsFile String: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
sharedCredentialsFiles List<String>: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
skipCredentialsValidation Boolean: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
skipGetEc2Platforms Boolean: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
skipMetadataApiCheck Boolean: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
skipRegionValidation Boolean: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
skipRequestingAccountId Boolean: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
stsRegion String: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
token String: session token. A session token is only required if you are using temporary security credentials.
useDualstackEndpoint Boolean: Resolve an endpoint with DualStack capability
useFipsEndpoint Boolean: Resolve an endpoint with FIPS capability

accessKey string: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
allowedAccountIds string[]
assumeRole ProviderAssumeRole
assumeRoleWithWebIdentity ProviderAssumeRoleWithWebIdentity
customCaBundle string: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
defaultTags ProviderDefaultTags: Configuration block with settings to default resource tags across all resources.
ec2MetadataServiceEndpoint string: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
ec2MetadataServiceEndpointMode string: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
endpoints ProviderEndpoint[]
forbiddenAccountIds string[]
httpProxy string: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
ignoreTags ProviderIgnoreTags: Configuration block with settings to ignore resource tags across all resources.
insecure boolean: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
maxRetries number: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
profile string: The profile for API operations. If not set, the default profile created with aws configure will be used.
region Region: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
s3ForcePathStyle boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
s3UsePathStyle boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
secretKey string: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
sharedConfigFiles string[]: List of paths to shared config files. If not set, defaults to [~/.aws/config].
sharedCredentialsFile string: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
sharedCredentialsFiles string[]: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
skipCredentialsValidation boolean: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
skipGetEc2Platforms boolean: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
skipMetadataApiCheck boolean: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
skipRegionValidation boolean: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
skipRequestingAccountId boolean: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
stsRegion string: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
token string: session token. A session token is only required if you are using temporary security credentials.
useDualstackEndpoint boolean: Resolve an endpoint with DualStack capability
useFipsEndpoint boolean: Resolve an endpoint with FIPS capability

access_key str: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
allowed_account_ids Sequence[str]
assume_role ProviderAssumeRoleArgs
assume_role_with_web_identity ProviderAssumeRoleWithWebIdentityArgs
custom_ca_bundle str: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
default_tags ProviderDefaultTagsArgs: Configuration block with settings to default resource tags across all resources.
ec2_metadata_service_endpoint str: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
ec2_metadata_service_endpoint_mode str: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
endpoints Sequence[ProviderEndpointArgs]
forbidden_account_ids Sequence[str]
http_proxy str: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
ignore_tags ProviderIgnoreTagsArgs: Configuration block with settings to ignore resource tags across all resources.
insecure bool: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
max_retries int: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
profile str: The profile for API operations. If not set, the default profile created with aws configure will be used.
region str: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
s3_force_path_style bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
s3_use_path_style bool: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
secret_key str: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
shared_config_files Sequence[str]: List of paths to shared config files. If not set, defaults to [~/.aws/config].
shared_credentials_file str: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
shared_credentials_files Sequence[str]: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
skip_credentials_validation bool: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
skip_get_ec2_platforms bool: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
skip_metadata_api_check bool: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
skip_region_validation bool: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
skip_requesting_account_id bool: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
sts_region str: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
token str: session token. A session token is only required if you are using temporary security credentials.
use_dualstack_endpoint bool: Resolve an endpoint with DualStack capability
use_fips_endpoint bool: Resolve an endpoint with FIPS capability

accessKey String: The access key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
allowedAccountIds List<String>
assumeRole Property Map
assumeRoleWithWebIdentity Property Map
customCaBundle String: File containing custom root and intermediate certificates. Can also be configured using the AWS_CA_BUNDLE environment variable. (Setting ca_bundle in the shared config file is not supported.)
defaultTags Property Map: Configuration block with settings to default resource tags across all resources.
ec2MetadataServiceEndpoint String: Address of the EC2 metadata service endpoint to use. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT environment variable.
ec2MetadataServiceEndpointMode String: Protocol to use with EC2 metadata service endpoint.Valid values are IPv4 and IPv6. Can also be configured using the AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE environment variable.
endpoints List<Property Map>
forbiddenAccountIds List<String>
httpProxy String: The address of an HTTP proxy to use when accessing the AWS API. Can also be configured using the HTTP_PROXY or HTTPS_PROXY environment variables.
ignoreTags Property Map: Configuration block with settings to ignore resource tags across all resources.
insecure Boolean: Explicitly allow the provider to perform "insecure" SSL requests. If omitted, default value is false
maxRetries Number: The maximum number of times an AWS API request is being executed. If the API request still fails, an error is thrown.
profile String: The profile for API operations. If not set, the default profile created with aws configure will be used.
region: The region where AWS operations will take place. Examples are us-east-1, us-west-2, etc. It can also be sourced from the following environment variables: AWS_REGION, AWS_DEFAULT_REGION
s3ForcePathStyle Boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
Deprecated: Use s3_use_path_style instead.
s3UsePathStyle Boolean: Set this to true to enable the request to use path-style addressing, i.e., https://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will use virtual hosted bucket addressing when possible (https://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.
secretKey String: The secret key for API operations. You can retrieve this from the 'Security & Credentials' section of the AWS console.
sharedConfigFiles List<String>: List of paths to shared config files. If not set, defaults to [~/.aws/config].
sharedCredentialsFile String: The path to the shared credentials file. If not set, defaults to ~/.aws/credentials.
Deprecated: Use shared_credentials_files instead.
sharedCredentialsFiles List<String>: List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].
skipCredentialsValidation Boolean: Skip the credentials validation via STS API. Used for AWS API implementations that do not have STS available/implemented.
skipGetEc2Platforms Boolean: Skip getting the supported EC2 platforms. Used by users that don't have ec2:DescribeAccountAttributes permissions.
Deprecated: With the retirement of EC2-Classic the skip_get_ec2_platforms attribute has been deprecated and will be removed in a future version.
skipMetadataApiCheck Boolean: Skip the AWS Metadata API check. Used for AWS API implementations that do not have a metadata api endpoint.
skipRegionValidation Boolean: Skip static validation of region name. Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).
skipRequestingAccountId Boolean: Skip requesting the account ID. Used for AWS API implementations that do not have IAM/STS API and/or metadata API.
stsRegion String: The region where AWS STS operations will take place. Examples are us-east-1 and us-west-2.
token String: session token. A session token is only required if you are using temporary security credentials.
useDualstackEndpoint Boolean: Resolve an endpoint with DualStack capability
useFipsEndpoint Boolean: Resolve an endpoint with FIPS capability