Go SDK v2 + SSO question

Question

I'm trying to get authenticated using my SSO account, which does seem to be working, but as soon as I call `GetCallerIdentity()` on the `sts` client, I get an invalid token id error. On my laptop, I am logged in to the same SSO profile that I'm trying to use and I can run `aws sts get-caller-identity` from the command line just fine.

```
func whoAmI() {
		ctx := context.TODO()

fmt.Printf("AWS profile: '%s'
", os.Getenv("AWS_PROFILE")) // shows the name of the profile under which i'm currently authenticated just for reference

cfg, err := config.LoadDefaultConfig(
			ctx,
			config.WithSharedConfigProfile("same-profle-name-as-above"),
		)
		if err != nil {
			log.Fatal(err)
		}

fmt.Printf("%+v
", cfg) // shows me all the right stuff (keys, region, etc.)

client := sts.NewFromConfig(cfg)
		identity, err := client.GetCallerIdentity(
			ctx,
			&sts.GetCallerIdentityInput{},
		)
		if err != nil {
			log.Fatal(err)
		}

fmt.Printf("%+v", identity)

return nil
}
```

Result:

```
operation error STS: GetCallerIdentity, https response error StatusCode: 403, RequestID: , api error InvalidClientTokenId: The security token included in the request is invalid
```

What am I missing here? As mentioned, I can run the analogous awscli command with no issue and I have full admin access to the account.

Answer

"fmt.Printf("AWS profile: '%s'
", os.Getenv("AWS_PROFILE"))" seems to display authentication information, are you sure you have the correct content here?  
If not, try setting environment variables in the shell where you are running the script.

```
export AWS_ACCESS_KEY_ID="ACCESS_KEY_ID"
export AWS_SECRET_ACCESS_KEY="SECRET_ACCESS_KEY"
export AWS_SESSION_TOKEN="SESSION_TOKEN"
```

Go SDK v2 + SSO question

Relevant content