Skip to content

SNOW-2690872: Excessive botocore.credentials DEBUG logs even after disabling EC2 metadata in Snowflake Connector for Python #2639

@yasasinukollu

Description

@yasasinukollu

After upgrading to snowflake-connector-python ≥ 3.17.x, we’re seeing verbose botocore.credentials DEBUG logs every time the connector initializes, even when AWS_EC2_METADATA_DISABLED=true is set and no AWS authentication is used.

Example log output:

Looking for credentials via: env
Looking for credentials via: assume-role
Looking for credentials via: assume-role-with-web-identity
Access to EC2 metadata has been disabled.
Looking for credentials via: shared-credentials-file
Looking for credentials via: iam-role

These logs appear in non-AWS environments (Kubernetes / on-prem) where Snowflake Connector is only being used with standard user/password or keypair authentication.
They are emitted by the internal boto3 / botocore libraries bundled with the connector, and can clutter our application logs even though no actual metadata lookup or AWS authentication is required.

Metadata

Metadata

Labels

status-triage_doneInitial triage done, will be further handled by the driver team

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions