From 20cf4777cbf52b4b76777faaf20ceb4ba5a71df5 Mon Sep 17 00:00:00 2001
From: Michael Eischer <michael.eischer@fau.de>
Date: Sat, 6 Jan 2024 21:43:41 +0100
Subject: [PATCH] s3: check for EnvAWS credentials before Static credentials

EnvAWS considers more environment variables, including AWS_SESSION_TOKEN
and thus should be checked first.
---
 internal/backend/s3/s3.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/backend/s3/s3.go b/internal/backend/s3/s3.go
index ff81a05d6..d48813cf2 100644
--- a/internal/backend/s3/s3.go
+++ b/internal/backend/s3/s3.go
@@ -107,13 +107,13 @@ func getCredentials(cfg Config) (*credentials.Credentials, error) {
 	//    call to a pre-defined endpoint, only valid inside
 	//    configured ec2 instances)
 	creds := credentials.NewChainCredentials([]credentials.Provider{
+		&credentials.EnvAWS{},
 		&credentials.Static{
 			Value: credentials.Value{
 				AccessKeyID:     cfg.KeyID,
 				SecretAccessKey: cfg.Secret.Unwrap(),
 			},
 		},
-		&credentials.EnvAWS{},
 		&credentials.EnvMinio{},
 		&credentials.FileAWSCredentials{},
 		&credentials.FileMinioClient{},