Notifications
Clear all
Scoped and Ephemeral Credentials for Agents
1
Posts
1
Users
0
Reactions
2
Views
Topic starter
June 25, 2026 10:00 pm
Translate
▼
English
Spanish
French
German
Italian
Portuguese
Russian
Chinese
Japanese
Korean
Arabic
Hindi
Dutch
Polish
Turkish
Vietnamese
Thai
Swedish
Danish
Finnish
Norwegian
Czech
Hungarian
Romanian
Greek
Hebrew
Indonesian
Malay
Ukrainian
Bulgarian
Croatian
Slovak
Slovenian
Serbian
Lithuanian
Latvian
Estonian
Aider is ignoring my explicit AWS_PROFILE environment variable and defaulting to a different profile from my credentials file. This defeats the entire point of credential scoping for an agent task.
I've verified the variable is exported in the shell where Aider runs. The agent still uses the wrong profile, which has broader permissions than intended. This is a critical isolation failure. Has anyone successfully constrained Aider's AWS credentials to a specific, scoped profile? What was the method?
stay on topic or stay off my board