chore: refine error message for empty aws auth (#11271)

src/connector/src/aws_auth.rs

@@ -12,6 +12,7 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
+use anyhow::anyhow;
 use aws_config::default_provider::region::DefaultRegionChain;
 use aws_config::sts::AssumeRoleProvider;
 use aws_credential_types::provider::SharedCredentialsProvider;
@@ -85,12 +86,20 @@ impl AwsAuthProps {
         }
     }
 
-    fn build_credential_provider(&self) -> SharedCredentialsProvider {
-        SharedCredentialsProvider::new(aws_credential_types::Credentials::from_keys(
-            self.access_key.as_ref().unwrap_or(&"".into()),
-            self.secret_key.as_ref().unwrap_or(&"".into()),
-            self.session_token.clone(),
-        ))
+    fn build_credential_provider(&self) -> anyhow::Result<SharedCredentialsProvider> {
+        if self.access_key.is_some() && self.secret_key.is_some() {
+            Ok(SharedCredentialsProvider::new(
+                aws_credential_types::Credentials::from_keys(
+                    self.access_key.as_ref().unwrap(),
+                    self.secret_key.as_ref().unwrap(),
+                    self.session_token.clone(),
+                ),
+            ))
+        } else {
+            Err(anyhow!(
+                "Both \"access_key\" and \"secret_access\" are required."
+            ))
+        }
     }
 
     async fn with_role_provider(
@@ -114,7 +123,7 @@ impl AwsAuthProps {
     pub async fn build_config(&self) -> anyhow::Result<SdkConfig> {
         let region = self.build_region().await?;
         let credentials_provider = self
-            .with_role_provider(self.build_credential_provider())
+            .with_role_provider(self.build_credential_provider()?)
             .await?;
         let mut config_loader = aws_config::from_env()
             .region(region)