fix(backend-deployer): improve handling of expired AWS credentials (#2185)

Author: vigy02

.changeset/cool-pumpkins-dream.md

@@ -0,0 +1,5 @@
+---
+'@aws-amplify/backend-deployer': patch
+---
+
+reclassify as error, UnknownFault, Error: The security token included in the request is expired

packages/backend-deployer/src/cdk_error_mapper.test.ts

@@ -22,6 +22,15 @@ const testErrorMappings = [
     errorName: 'ExpiredTokenError',
     expectedDownstreamErrorMessage: 'ExpiredToken',
   },
+  {
+    errorMessage:
+      'Error: The security token included in the request is expired',
+    expectedTopLevelErrorMessage:
+      'The security token included in the request is invalid.',
+    errorName: 'ExpiredTokenError',
+    expectedDownstreamErrorMessage:
+      'Error: The security token included in the request is expired',
+  },
   {
     errorMessage: 'Access Denied',
     expectedTopLevelErrorMessage:

packages/backend-deployer/src/cdk_error_mapper.ts

@@ -90,10 +90,12 @@ export class CdkErrorMapper {
     classification: AmplifyErrorClassification;
   }> => [
     {
-      errorRegex: /ExpiredToken/,
+      errorRegex:
+        /ExpiredToken|Error: The security token included in the request is expired/,
       humanReadableErrorMessage:
         'The security token included in the request is invalid.',
-      resolutionMessage: 'Ensure your local AWS credentials are valid.',
+      resolutionMessage:
+        "Please update your AWS credentials. You can do this by running `aws configure` or by updating your AWS credentials file. If you're using temporary credentials, you may need to obtain new ones.",
       errorName: 'ExpiredTokenError',
       classification: 'ERROR',
     },