TL;DR TL;DR The AWS provider reads credentials from six places, first match wins: provider block arguments, environment variables, the shared credentials file, the shared config file, container credentials, then the EC2 instance profile. I confirmed the first three with Terraform 1.17.1 and AWS provider 6.71.0 on …