From 01dec025fed80bcd1900ab61ad8c5c98533cdf3d Mon Sep 17 00:00:00 2001
From: Lee Chiang Fong <lee_chiang_fong@tech.gov.sg>
Date: Thu, 9 Jan 2025 15:43:57 +0800
Subject: [PATCH] Use mainAccount's region as stsRegion

Signed-off-by: Lee Chiang Fong <lee_chiang_fong@tech.gov.sg>
---
 .../src/DefaultAwsCredentialsManager.test.ts     | 16 ++++++++++++++++
 .../src/DefaultAwsCredentialsManager.ts          |  1 +
 2 files changed, 17 insertions(+)

diff --git a/packages/integration-aws-node/src/DefaultAwsCredentialsManager.test.ts b/packages/integration-aws-node/src/DefaultAwsCredentialsManager.test.ts
index a4e13916ff..582b003724 100644
--- a/packages/integration-aws-node/src/DefaultAwsCredentialsManager.test.ts
+++ b/packages/integration-aws-node/src/DefaultAwsCredentialsManager.test.ts
@@ -500,5 +500,21 @@ describe('DefaultAwsCredentialsManager', () => {
         },
       });
     });
+
+    it('passes mainAccount region to fillInAccountId for account ID lookup during fallback', async () => {
+      const region = 'us-west-2';
+      const configWithRegion = new ConfigReader({
+        aws: {
+          mainAccount: {
+            region,
+          },
+        },
+      });
+      const provider =
+        DefaultAwsCredentialsManager.fromConfig(configWithRegion);
+      await provider.getCredentialProvider({ accountId: '123456789012' });
+
+      expect(await stsMock.call(0).thisValue.config.region()).toEqual(region);
+    });
   });
 });
diff --git a/packages/integration-aws-node/src/DefaultAwsCredentialsManager.ts b/packages/integration-aws-node/src/DefaultAwsCredentialsManager.ts
index 36c753767c..b54a4fda26 100644
--- a/packages/integration-aws-node/src/DefaultAwsCredentialsManager.ts
+++ b/packages/integration-aws-node/src/DefaultAwsCredentialsManager.ts
@@ -175,6 +175,7 @@ export class DefaultAwsCredentialsManager implements AwsCredentialsManager {
       awsConfig.mainAccount,
     );
     const mainAccountCredProvider: AwsCredentialProvider = {
+      stsRegion: awsConfig.mainAccount.region,
       sdkCredentialProvider: mainAccountSdkCredProvider,
     };