Add credentials to DynamoDB

Author: GuidoBR

backend/src/config/configuration.ts

@@ -10,10 +10,14 @@ export default () => ({
     secretsManager: {
       perplexityApiKeySecret: process.env.PERPLEXITY_API_KEY_SECRET_NAME || 'medical-reports-explainer/perplexity-api-key',
     },
+    aws: {
+      accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+      secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+    }
   },
   perplexity: {
     apiBaseUrl: 'https://api.perplexity.ai',
     model: process.env.PERPLEXITY_MODEL || 'sonar',
     maxTokens: parseInt(process.env.PERPLEXITY_MAX_TOKENS || '2048', 10),
   },
-}); 
+});

backend/src/reports/reports.service.ts

@@ -17,19 +17,45 @@ export class ReportsService {
   private readonly tableName: string;
 
   constructor(private configService: ConfigService) {
-    this.dynamoClient = new DynamoDBClient({
-      region: this.configService.get<string>('AWS_REGION', 'us-east-1'),
-    });
-    this.tableName = this.configService.get<string>('DYNAMODB_TABLE_NAME', 'reports');
+    const region = this.configService.get<string>('AWS_REGION', 'us-east-1');
+
+    try {
+      this.dynamoClient = new DynamoDBClient({
+        region: this.configService.get<string>('AWS_REGION', 'us-east-1')
+      });
+    } catch (error: unknown) {
+        console.error('DynamoDB Client Config:', JSON.stringify(error, null, 2));
+        const accessKeyId = this.configService.get<string>('AWS_ACCESS_KEY_ID');
+        const secretAccessKey = this.configService.get<string>('AWS_SECRET_ACCESS_KEY');
+
+        const clientConfig: any = { region };
+
+        // Only add credentials if both values are present
+        if (accessKeyId && secretAccessKey) {
+          clientConfig.credentials = { accessKeyId, secretAccessKey };
+        }
+
+        this.dynamoClient = new DynamoDBClient(clientConfig);
+      }
+
+    this.tableName = this.configService.get<string>('DYNAMODB_REPORTS_TABLE', 'reports');
   }
 
   async findAll(): Promise<Report[]> {
     const command = new ScanCommand({
       TableName: this.tableName,
     });
 
-    const response = await this.dynamoClient.send(command);
-    return (response.Items || []).map(item => unmarshall(item) as Report);
+    try {
+      const response = await this.dynamoClient.send(command);
+      return (response.Items || []).map(item => unmarshall(item) as Report);
+    } catch (error: unknown) {
+      console.error('DynamoDB Error Details:', JSON.stringify(error, null, 2));
+      if (error instanceof Error && error.name === 'UnrecognizedClientException') {
+        throw new Error('Invalid AWS credentials. Please check your AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.');
+      }
+      throw error;
+    }
   }
 
   async findLatest(queryDto: GetReportsQueryDto): Promise<Report[]> {