AuthFailure with saml2aws-generated credentials question

[manithree]

I started playing around with aws-sdk-rust at home with my personal aws account using access key credentials generated in the AWS console. That seems to work fine for me.

Then I tried to do something at work, and there I log in with saml2aws and okta. boto3 and the aws cli work just fine with the key and secret id that saml2aws writes to .aws/credentials, but when I put those in environment variables for aws-sdk-rust, all I can get is:
Error: Unhandled(Error { code: Some("AuthFailure"), message: Some("AWS was not able to validate the provided access credentials"), request_id: None, extras: {} })

At the moment, I'm just trying to get the ec2 example from this repository to work. Am I doing something wrong?
rustc 1.55.0-nightly (a85f584ae 2021-06-16)

[rcoh]

are you setting the AWS_SESSION_TOKEN variable as well? Looks like saml2aws sets that in addition to the other standard variables

[manithree]

I wasn't, but if I do, it works now.
Thanks!

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.