From 79d31cd007d68aac1a55ad778f3bf5f5b1d60f7d Mon Sep 17 00:00:00 2001
From: Shridhar Rathod <srathod-apphelix@2u.com>
Date: Wed, 29 Jul 2026 18:41:25 +0530
Subject: [PATCH 1/2] fix: pass AWS region when fetching git identity for
 containerized sandbox builds

---
 util/jenkins/ansible-provision.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/util/jenkins/ansible-provision.sh b/util/jenkins/ansible-provision.sh
index a408a966c..a576fac0c 100644
--- a/util/jenkins/ansible-provision.sh
+++ b/util/jenkins/ansible-provision.sh
@@ -783,7 +783,7 @@ EOF
 
       set +x
 
-      app_git_ssh_key=$(aws secretsmanager get-secret-value --secret-id  $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+      app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
 
       # specify variable names
       app_hostname="courses"
@@ -961,7 +961,7 @@ fi
 if [[ $edx_exams == 'true' ]]; then
     set +x
     
-    app_git_ssh_key=$(aws secretsmanager get-secret-value --secret-id  $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
 
     app_hostname="edx-exams"
     app_service_name="edx_exams"
@@ -985,7 +985,7 @@ fi
 if [[ $subscriptions == 'true' ]]; then
     set +x
     
-    app_git_ssh_key=$(aws secretsmanager get-secret-value --secret-id  $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
     
     app_hostname="subscriptions"
     app_service_name="subscriptions"

From d8f2b7c68488dcea182619c802c534fc4471253e Mon Sep 17 00:00:00 2001
From: Shridhar Rathod <srathod-apphelix@2u.com>
Date: Wed, 29 Jul 2026 18:57:00 +0530
Subject: [PATCH 2/2] fix: added commented changes

---
 util/jenkins/ansible-provision.sh | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/util/jenkins/ansible-provision.sh b/util/jenkins/ansible-provision.sh
index a576fac0c..3307bf777 100644
--- a/util/jenkins/ansible-provision.sh
+++ b/util/jenkins/ansible-provision.sh
@@ -783,7 +783,7 @@ EOF
 
       set +x
 
-      app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+      app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id "${configuration_secure_secret}" --query SecretString --output text | jq -r '._local_git_identity')
 
       # specify variable names
       app_hostname="courses"
@@ -961,7 +961,7 @@ fi
 if [[ $edx_exams == 'true' ]]; then
     set +x
     
-    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id "${configuration_secure_secret}" --query SecretString --output text | jq -r '._local_git_identity')
 
     app_hostname="edx-exams"
     app_service_name="edx_exams"
@@ -985,7 +985,7 @@ fi
 if [[ $subscriptions == 'true' ]]; then
     set +x
     
-    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id $configuration_secure_secret --query SecretString --output text | jq -r '._local_git_identity')
+    app_git_ssh_key=$(aws secretsmanager get-secret-value --region "${region}" --secret-id "${configuration_secure_secret}" --query SecretString --output text | jq -r '._local_git_identity')
     
     app_hostname="subscriptions"
     app_service_name="subscriptions"