Merge pull request #16585 from iterate-ch/bugfix/GH-16377-region

Set STS endpoint explicitly and allow override in profile.
iterate-ch · Nov 26, 2024 · 604cb16 · 604cb16
2 parents 2790232 + 025cc56
commit 604cb16
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/s3/src/main/java/ch/cyberduck/core/s3/S3Session.java b/s3/src/main/java/ch/cyberduck/core/s3/S3Session.java
@@ -89,6 +89,7 @@
 import java.util.Set;
 import java.util.concurrent.ConcurrentHashMap;
 
+import com.amazonaws.client.builder.AwsClientBuilder;
 import com.amazonaws.services.securitytoken.AWSSecurityTokenService;
 import com.amazonaws.services.securitytoken.AWSSecurityTokenServiceClientBuilder;
 import com.amazonaws.services.securitytoken.model.AWSSecurityTokenServiceException;
@@ -339,6 +340,7 @@ public void login(final LoginCallback prompt, final CancelCallback cancel) throw
                 final CustomClientConfiguration configuration = new CustomClientConfiguration(host,
                         new ThreadLocalHostnameDelegatingTrustManager(trust, host.getHostname()), key);
                 final AWSSecurityTokenServiceClientBuilder builder = AWSSecurityTokenServiceClientBuilder.standard()
+                        .withEndpointConfiguration(new AwsClientBuilder.EndpointConfiguration(host.getProtocol().getSTSEndpoint(), null))
                         .withCredentials(AWSCredentialsConfigurator.toAWSCredentialsProvider(client.getProviderCredentials()))
                         .withClientConfiguration(configuration);
                 final AWSSecurityTokenService service = builder.build();