fix(cli): ec2ssm use runner region, not cfg region (#1122)

Calls to the EC2 API currently fail when the region of the runner is different from the region of the credentials used to authenticate the request. This commit modifies the EC2 clients that we create during `ec2ssm` execution to use `run.Region` instead of `cfg.Region`. Fixes RAIN-47298 Signed-off-by: nschmeller <[email protected]>
lacework · Jan 26, 2023 · 2f31808 · 2f31808
1 parent c463aad
commit 2f31808
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lwrunner/awsrunner.go b/lwrunner/awsrunner.go
@@ -134,7 +134,7 @@ func (run AWSRunner) SendPublicKey(pubBytes []byte) error {
 func (run AWSRunner) AssociateInstanceProfileWithRunner(cfg aws.Config, instanceProfile types.InstanceProfile) error {
 	c := ec2.New(ec2.Options{
 		Credentials: cfg.Credentials,
-		Region:      cfg.Region,
+		Region:      run.Region,
 	})
 
 	// Check to see if there are any instance profiles already associated with the runner
@@ -254,7 +254,7 @@ const SSMInstancePolicy string = "arn:aws:iam::aws:policy/AmazonSSMManagedInstan
 func (run AWSRunner) RunSSMCommandOnRemoteHost(cfg aws.Config, operation string) (ssm.GetCommandInvocationOutput, error) {
 	c := ssm.New(ssm.Options{
 		Credentials: cfg.Credentials,
-		Region:      cfg.Region,
+		Region:      run.Region,
 	})
 
 	sendCommandOutput, err := c.SendCommand(