This is an automated email from the ASF dual-hosted git repository.
Lee-W pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 00f1457ebfb Fix reversed credential precedence in Bedrock hook
docstring (#71826)
00f1457ebfb is described below
commit 00f1457ebfb650406e7cb29325ce3f1d252ce86a
Author: Wei Lee <[email protected]>
AuthorDate: Fri Aug 21 11:05:47 2026 +0900
Fix reversed credential precedence in Bedrock hook docstring (#71826)
---
.../common/ai/src/airflow/providers/common/ai/hooks/pydantic_ai.py | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git
a/providers/common/ai/src/airflow/providers/common/ai/hooks/pydantic_ai.py
b/providers/common/ai/src/airflow/providers/common/ai/hooks/pydantic_ai.py
index 8f4e71a9a69..c0bea0ddcbc 100644
--- a/providers/common/ai/src/airflow/providers/common/ai/hooks/pydantic_ai.py
+++ b/providers/common/ai/src/airflow/providers/common/ai/hooks/pydantic_ai.py
@@ -355,9 +355,10 @@ class PydanticAIBedrockHook(PydanticAIHook):
Credentials are resolved in order:
- 1. IAM keys from ``extra`` (``aws_access_key_id`` +
``aws_secret_access_key``,
+ 1. Bearer token in ``extra`` (``api_key``, maps to env
``AWS_BEARER_TOKEN_BEDROCK``).
+ Takes precedence over IAM keys if both are set.
+ 2. IAM keys from ``extra`` (``aws_access_key_id`` +
``aws_secret_access_key``,
optionally ``aws_session_token``).
- 2. Bearer token in ``extra`` (``api_key``, maps to env
``AWS_BEARER_TOKEN_BEDROCK``).
3. Environment-variable / instance-role chain (``AWS_PROFILE``, IAM role,
…)
when no explicit keys are provided.
