Skip to content

Conversation

@vietcgi
Copy link
Contributor

@vietcgi vietcgi commented Nov 25, 2025

Setting AWS_USE_FIPS_ENDPOINT=false incorrectly enables FIPS endpoints because the code treats any non-empty string as true.

This fixes boolAttrDefaultEnvVarOk to properly parse "true"/"false" (case-insensitive), matching AWS SDK behavior.

Fixes #37601

@vietcgi vietcgi requested review from a team as code owners November 25, 2025 21:38
@vietcgi vietcgi force-pushed the fix/s3-backend-fips-env-var-parsing branch from d1d6240 to b62d97a Compare November 25, 2025 21:45
@crw
Copy link
Contributor

crw commented Nov 26, 2025

Thanks for this submission! The S3 backend is maintained by the AWS Provider team at HashiCorp, and IBM company. I have notified that team of your PR. Thanks again!

@SaurabhAhuja1983
Copy link

@crw Thank you for getting the PR in the queue. Can we expedite this process? It has been a month since it's pending review.

jar-b added 2 commits January 7, 2026 15:50
This is consistent with the `kind` used for previous breaking changes to S3 backend behavior.
@jar-b jar-b self-assigned this Jan 7, 2026
Copy link
Member

@jar-b jar-b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🎉

% TF_ACC=1 go test -count=1 ./...
ok      github.com/hashicorp/terraform/internal/backend/remote-state/s3 202.097s

@jar-b
Copy link
Member

jar-b commented Jan 7, 2026

Thank you for the contribution, @vietcgi! 👍

I modified the changelog entry to an upgrade note to align with how previous breaking changes to S3 backend behavior have been documented.

Copy link
Member

@YakDriver YakDriver left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🎉

@jar-b jar-b merged commit 0b9a20c into hashicorp:main Jan 8, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

S3 Backend: AWS_USE_FIPS_ENDPOINT incorrectly enables FIPS endpoints — env variable is not parsed as boolean

6 participants