buildkite/buildkite-signed-pipeline

Infer the AWS SM region from the ARN

zsims opened this issue · 0 comments

zsims commented

Per https://github.com/seek-oss/buildkite-signed-pipeline/blob/e2bedb1643ac2c6aa22619512c0d24db3ad8d92e/main.go#L192 this assumes the "current" region is the same region of the secret. Even if the ARN is used, the --region still needs to be set on the SDK in order to read it from AWS SM.