fix(amazonq): Q chat stopped using IAM creds in the Amazon Q v1.63.0 release #7667
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Problem
Amazon Q for VSCode fails to authenticate in SageMaker environments after v1.62.0. The extension moved from directly calling the Q service using AWS SDK clients to using the aws-lsp-codewhisperer service (LSP). While the legacy
implementation had specific handling for SageMaker IAM credentials, the new LSP-based implementation only supports SSO token authentication.
The breaking change occurred in commit 938bb37 which enabled three experiment flags by default, moving the extension from the core implementation to the LSP implementation that lacks IAM credential
support.
Solution
This PR adds IAM authentication support to the Amazon Q LSP client for SageMaker environments by:
The solution maintains backward compatibility with existing SSO authentication while enabling IAM credential support specifically for SageMaker environments, restoring the functionality that was available in the legacy core
implementation.