{"record":{"id":"1e95f7126cae36c0","repo":"kubernetes/kops","slug":"failed-to-load-default-aws-config-w-1e95f7","errorCode":null,"errorMessage":"failed to load default aws config: %w","messagePattern":"failed to load default aws config: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"upup/pkg/fi/cloudup/awsup/aws_cloud.go","lineNumber":295,"sourceCode":"\tloadOptions := []func(*awsconfig.LoadOptions) error{\n\t\tawsconfig.WithRegion(region),\n\t\tawsconfig.WithClientLogMode(aws.LogRetries),\n\t\tawsconfig.WithLogger(awsLogger{}),\n\t\tawsconfig.WithRetryer(func() aws.Retryer {\n\t\t\treturn retry.NewAdaptiveMode(func(ao *retry.AdaptiveModeOptions) {\n\t\t\t\tao.StandardOptions = append(ao.StandardOptions, func(so *retry.StandardOptions) {\n\t\t\t\t\tso.MaxAttempts = ClientMaxRetries\n\t\t\t\t})\n\t\t\t})\n\t\t}),\n\t}\n\n\t// assumes the role before executing commands\n\troleARN := os.Getenv(\"KOPS_AWS_ROLE_ARN\")\n\tif roleARN != \"\" {\n\t\tcfg, err := awsconfig.LoadDefaultConfig(ctx, loadOptions...)\n\t\tif err != nil {\n\t\t\treturn aws.Config{}, fmt.Errorf(\"failed to load default aws config: %w\", err)\n\t\t}\n\t\tstsClient := sts.NewFromConfig(cfg)\n\t\tassumeRoleProvider := stscredsv2.NewAssumeRoleProvider(stsClient, roleARN)\n\n\t\tloadOptions = append(loadOptions, awsconfig.WithCredentialsProvider(assumeRoleProvider))\n\t}\n\n\treturn awsconfig.LoadDefaultConfig(ctx, loadOptions...)\n}\n\nfunc NewAWSCloud(region string, tags map[string]string) (AWSCloud, error) {\n\tctx := context.TODO()\n\traw := getCloudInstancesFromRegion(region)\n\n\tif raw == nil {\n\t\tc := &awsCloudImplementation{\n\t\t\tregion: region,\n\t\t\tinstanceTypes: &instanceTypes{","sourceCodeStart":277,"sourceCodeEnd":313,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/upup/pkg/fi/cloudup/awsup/aws_cloud.go#L277-L313","documentation":"loadAWSConfig calls awsconfig.LoadDefaultConfig with the computed region, retry and assume-role options (KOPS_AWS_ROLE_ARN); it failed, e.g. invalid region/role environment variables or no resolvable credentials/config sources.","triggerScenarios":"Thrown at upup/pkg/fi/cloudup/awsup/aws_cloud.go:295 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify AWS_REGION/AWS_DEFAULT_REGION and KOPS_AWS_ROLE_ARN are set to valid values","Check that credentials resolve via the default chain (env vars, shared config, instance profile)","Run `aws sts get-caller-identity` to confirm the chain works outside kOps"],"exampleFix":null,"handlingStrategy":"fallback","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T12:17:11.808Z"}