Input
ExecutionTrigger execution
Data/Providers
Build an AWS credential struct. Supports explicit access keys, named profiles, EC2 instance metadata, EKS web identity (IRSA), STS AssumeRole and the default environment chain. Emits an AwsProvider that any AWS-aware node (S3, Athena, Bedrock, ...) can consume.
Scores range from 0 to 10. Higher values mean more impact, exposure, or operational weight.
Trigger execution
How to authenticate: 'access_key' (static keys), 'environment' (default chain: env vars / shared config), 'profile' (~/.aws/credentials profile), 'instance_metadata' (EC2 IMDS), 'web_identity' (EKS IRSA / OIDC token file), 'assume_role' (STS AssumeRole)
AWS region (e.g. 'us-east-1', 'eu-west-1')
Override endpoint URL for S3-compatible services (LocalStack, MinIO, Cloudflare R2, ...). Leave empty for real AWS.
AWS access key ID (used when auth_mode is 'access_key')
AWS secret access key (used when auth_mode is 'access_key')
Optional STS session token (used when auth_mode is 'access_key')
Provider built
AWS provider with authentication
Optional override endpoint (S3-compatible services, LocalStack, ...).