Construct the ARN inside the handler

1 files changed, 2 insertions, 1 deletions

diff --git a/jdisc-cloud-aws/src/main/java/com/yahoo/jdisc/cloud/aws/AwsParameterStoreValidationHandler.java b/jdisc-cloud-aws/src/main/java/com/yahoo/jdisc/cloud/aws/AwsParameterStoreValidationHandler.java
index db274a11ce8..91b643066fb 100644
--- a/jdisc-cloud-aws/src/main/java/com/yahoo/jdisc/cloud/aws/AwsParameterStoreValidationHandler.java
+++ b/jdisc-cloud-aws/src/main/java/com/yahoo/jdisc/cloud/aws/AwsParameterStoreValidationHandler.java
@@ -63,7 +63,8 @@ public class AwsParameterStoreValidationHandler extends LoggingRequestHandler {
         settings.toSlime(root.setObject("settings"));
 
         try {
-            var store = new AwsParameterStore(this.credentialsProvider, settings.role, settings.externalId);
+            var arn = "arn:aws:iam::" + settings.awsId + ":role/" + settings.role;
+            var store = new AwsParameterStore(this.credentialsProvider, arn, settings.externalId);
             store.getSecret("vespa-secret");
             root.setString("status", "ok");
         } catch (RuntimeException e) {