AWS_PROFILE in local runner

[minamesephy]

Hi all, I’m trying to refactor our use of aws-mwaa-local-runner to be able to use something like AWS_PROFILE or have refreshing credentials instead of what we’re currently doing with setting AWS_SECRET_ACCESS_KEY and AWS_SESSION_TOKEN and appending it to docker/config/.env.localrunner

Is there a good way to do something like this so that our credentials don’t expire every hour? Checking to see if there is any prior art here. Thank you!

[Nitindr]

Create a service IAM user with the necessary permissions attached to it and use those creds,
instead of using the temp credentials

We are using the similar setup for the Local runner to access our DEV SecretsManager and SNS