Merge pull request #744 from kukushking/fix/sts-region

fix: sts pass toolchain region

CHANGELOG.md

@@ -13,6 +13,7 @@ This project adheres to [Semantic Versioning](http://semver.org/) and [Keep a Ch
 - Added ability to disable env replacement in module parameters
 - Updating bootstrap docs with minimum permissions
 - Update manifest example module versions
+- Update session manager to pass toolchain role region to sts
 
 ### Fixes
 

seedfarmer/services/session_manager.py

@@ -140,6 +140,7 @@ def get_deployment_session(self, account_id: str, region_name: str) -> Session:
         session_key = f"{account_id}-{region_name}"
         project_name = self.config["project_name"]
         qualifier = self.config.get("qualifier") if self.config.get("qualifier") else None
+        toolchain_region = self.config.get("toolchain_region")
         if not self.created:
             raise seedfarmer.errors.InvalidConfigurationError("The SessionManager object was never properly created...")
         if session_key not in self.sessions.keys():
@@ -152,6 +153,7 @@ def get_deployment_session(self, account_id: str, region_name: str) -> Session:
                 aws_access_key_id=toolchain_role["Credentials"]["AccessKeyId"],
                 aws_secret_access_key=toolchain_role["Credentials"]["SecretAccessKey"],
                 aws_session_token=toolchain_role["Credentials"]["SessionToken"],
+                region_name=toolchain_region if toolchain_region else region_name,
             )
             partition = sts_toolchain_client.get_caller_identity()["Arn"].split(":")[1]
             deployment_role_arn = get_deployment_role_arn(