How to use named AWS CLI Profiles and SSO with the Go V2 SDK.

[jwechsler10]

Hello, I have been following the steps here on trying to use a named profile with SSO. I cannot seem to get it to work. Here is my code snippet that I am using:

package main

import (
	"context"
	"fmt"

	"github.com/aws/aws-sdk-go-v2/config"
	"github.com/aws/aws-sdk-go-v2/service/iam"
)

func main() {
	cfg, err := config.LoadDefaultConfig(context.Background(),
		config.WithSharedConfigProfile("sandbox"),
	)
	if err != nil {
		fmt.Println("could not start session")
		fmt.Println(err)
	}

	svc := iam.NewFromConfig(cfg)

	result, err := svc.ListGroups(context.TODO(), &iam.ListGroupsInput{})

	if err != nil {
		fmt.Println(err)
	}

	fmt.Println(result)
}

It fails with the error: operation error IAM: ListGroups, failed to sign request: failed to retrieve credentials: failed to refresh cached credentials, failed to read cached SSO token file, open ~/.aws/sso/cache/9ed037b84943c4caa3a520e48a5540181c46c98c.json: no such file or directory

I have always made sure to run aws sso login before running my script to make sure my credentials are valid.

My aws config file is setup as follows, redacting the real start URL, role names and account numbers:

[default]
sso_start_url = mystarturl
sso_region = us-east-1
sso_account_id = 1234567890
sso_role_name = MyRoleName
region = us-east-1

[profile sandbox]
sso_account_id = 2345678901
sso_role_name = MyRoleName
sso_session = sandbox
region = us-east-1
sso_start_url = mystarturl
sso_region = us-east-1

[sso-session sandbox]
sso_start_url = mystarturl
sso_region = us-east-1
sso_registration_scopes = sso:account:access

I have tried the following:

1. running aws sso login
2. running rm -rf ~/.aws/sso/cache and then running aws --profile sandbox sso login

I have verified that the default profile is working as expected