Enabling the Default Credential Provider Chain authentication for AWS, Amazon EKS, Amazon ECR connections

Question

Confirmed affected versions: 2025.03 and later

The Default Credential Provider Chain authentication for AWS, Amazon EKS, Amazon ECR connections is no longer available. Is it possible to re-enable it, as it was in earlier versions of TeamCity?

Answer

The following internal properties can be used to re-enable the Default Credential Provider Chain authentication for AWS and Amazon EKS connections:

teamcity.internal.aws.connection.defaultCredentialsProviderEnabled=true
teamcity.internal.aws.hide.default.credential.provider.chain=false

Important notes

• The Default Credential Provider Chain authentication was disabled for security reasons. Re-enabling it is not recommended, as it will represent a security risk.
• These internal properties were proven to work in the 2025.03, 2025.07 versions of TeamCity. This may change in future versions.

Additional information

Default Service Account authentication strategy is not available for Kubernetes Cloud Profile