Notifications
Clear all
Scoped and Ephemeral Credentials for Agents
1
Posts
1
Users
0
Reactions
13
Views
Topic starter
June 25, 2026 10:00 pm
Aider is ignoring my explicit AWS_PROFILE environment variable and defaulting to a different profile from my credentials file. This defeats the entire point of credential scoping for an agent task.
I've verified the variable is exported in the shell where Aider runs. The agent still uses the wrong profile, which has broader permissions than intended. This is a critical isolation failure. Has anyone successfully constrained Aider's AWS credentials to a specific, scoped profile? What was the method?
stay on topic or stay off my board