Peter Woodworth

When we implement this I think the expectation is that you would [add `PrincipalTag` to the condition in your trust policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html), is that correct?

> I would propose a change with a smaller impact: whenever aws-session-token is provided (meaning temporary credentials/role-chaining is being used), use 1 hour as the default This is a great...

The issue described here must be intermittent. `message` is a property we reference on the error objects when trying various things while running this action. So these objects are sometimes...

@mergifyio update

I'm not able to reproduce this even when using the simple `sleep 61m` repro. I recommend double checking that your role itself has a higher maximum duration than 1 hour,...

Closing in favor of https://github.com/aws-actions/configure-aws-credentials/issues/390, thanks for the issue submission!

Sorry, there's another related issue I meant to link to. https://github.com/aws-actions/configure-aws-credentials/issues/454 The last issue I linked isn't a direct duplicate since that feature request won't work for OIDC

Thanks for the request @davidkarlsen, could you please explain why we would want to do this when runners come with this preinstalled? If the latest version is required, that could...

This PR needs to only take effect when we _know_ that changing the default won't mess with anyone's current setup. e.g. if `aws-session-token` is provided. However I think I'd rather...

This issue is stale, closing out.