add region when get web identity token

sfc-gh-yuzzhang · sfc-gh-yuzzhang · commit 5b2a016a0b6f · 2026-02-19T11:11:00.000-08:00
diff --git a/src/snowflake/connector/wif_util.py b/src/snowflake/connector/wif_util.py
@@ -198,7 +198,7 @@ def create_aws_attestation(
     # TODO: Remove this environment variable check once AWS WIF outbound token is fully released
     # and make it the default behavior (SNOW-2919437)
     if os.environ.get("ENABLE_AWS_WIF_OUTBOUND_TOKEN", "false").lower() == "true":
-        sts_client = session.client("sts")
+        sts_client = session.client("sts", region_name=region)
         response = sts_client.get_web_identity_token(
             Audience=[SNOWFLAKE_AUDIENCE], SigningAlgorithm="ES384"
         )

Original file line number	Diff line number	Diff line change
`@@ -198,7 +198,7 @@ def create_aws_attestation(`
`198`	`198`	`# TODO: Remove this environment variable check once AWS WIF outbound token is fully released`
`199`	`199`	`# and make it the default behavior (SNOW-2919437)`
`200`	`200`	`if os.environ.get("ENABLE_AWS_WIF_OUTBOUND_TOKEN", "false").lower() == "true":`
`201`		`- sts_client = session.client("sts")`
	`201`	`+ sts_client = session.client("sts", region_name=region)`
`202`	`202`	`response = sts_client.get_web_identity_token(`
`203`	`203`	`Audience=[SNOWFLAKE_AUDIENCE], SigningAlgorithm="ES384"`
`204`	`204`	`)`