cdk <command> --profile <named profile> tries default regardless

cdk commands does not pick up the named profile from .aws/credential and ./aws/config. the profile is configured thru aws configure and in the format as specified in the aws doc. (two files, [<profile name>] in credential file and [profile <profile name>] in config file.

Reproduction Steps

create the profile specify account number and region in the stack env. run cdk synth or cdk deploy with --profile <profile name>

Error Log

[Error at /test-stack] Need to perform AWS calls for account ************, but no credentials found. Tried: default credentials.
Found errors

Environment

• **CLI Version : 1.16.3 **
• **Framework Version: 1.16.3 **
• OS : mac os
• **Language : python **

Other

Also tried to remove the [default] blocks in the .aws/ files, still same error.

---

This is 🐛 Bug Report

[vzakharchenko]

This solution is works for me:

~/.aws/config

[profile testProfile] region = us-east-1

~/.aws/credentials

[testProfile] role_arn = arn:aws:iam::... aws_access_key_id = ***** aws_secret_access_key = ********* source_profile=testProfile

command to deploy: cdk deploy --profile=testProfile

Environment

• CDK_CLI_ASM_VERSION: ‘1.16.0’,
• CDK_CLI_VERSION: ‘1.18.0’
• OS : mac os
• Language : java

[rafzei]

Try with the --verbose flag to get the error. In my case, it was Unable to determine the default AWS account: InvalidClientTokenId: The security token included in the request is invalid. And it turned out that aws_secret_access_key contains the plus (+) sign that causes the issue.