Amazon SES : boto3 credentials not found. DBR 11.2 Shared mode

[parthsalvi]

We're trying to send email using Amazon SES using boto3.client in python. We've added SES Full access in clusters IAM Role.

We were able to send email in "No isolation shared" mode in DBR 11.2 using

ses = boto3.client('ses', region_name='us-****-2')

 ses.send_raw_email(

  Source=msg['FROM'],

  Destinations=to_emails,

  RawMessage={'Data': msg.as_string()}) 

But we're getting "Unable to locate credentials"

 

Is this expected result in shared mode ? Do we need to add access key & secret key in order to send email in Shared mode ?

[JameDavi_51481]

This appears to be an intentional design choice to prevent users from using the credentials of the host machine to carry out arbitrary AWS API calls. I really wish there was a workaround or setting to disable this behavior because we put a lot of work into crafting IAM roles that grant the appropriate permissions for users of our clusters.