Don't pass credentials explicitly to sccache (#140611)

sccache-0.2.14 can query it thru IMDSv1 and sccache-0.8.2 can do it thru v2 (or may be just use trust relationships between host and bucket
Pull Request resolved: https://github.com/pytorch/pytorch/pull/140611
Approved by: https://github.com/wdvr

.github/actions/build-android/action.yml

@@ -48,8 +48,6 @@ runs:
       run: |
         # detached container should get cleaned up by teardown_ec2_linux
         set -exo pipefail
-        # Fetch aws credential from IMDs
-        eval "$(python3 .github/scripts/get_aws_session_tokens.py)"
         export container_name
         container_name=$(docker run \
           -e BUILD_ENVIRONMENT \

.github/workflows/_bazel-build-test.yml

@@ -143,9 +143,6 @@ jobs:
           OUR_GITHUB_JOB_ID: ${{ steps.get-job-id.outputs.job-id }}
           CUDA_VERSION: ${{ inputs.cuda-version }}
         run: |
-          python3 -m pip install boto3==1.19.12
-          # Fetch aws credential from IMDs
-          eval "$(python3 .github/scripts/get_aws_session_tokens.py)"
           export SHARD_NUMBER=0
           # detached container should get cleaned up by teardown_ec2_linux
           # TODO: Stop building test binaries as part of the build phase
@@ -154,6 +151,7 @@ jobs:
           # shellcheck disable=SC2086
           container_name=$(docker run \
             ${GPU_FLAG:-} \
+            -e AWS_DEFAULT_REGION \
             -e BUILD_ENVIRONMENT \
             -e GITHUB_ACTIONS \
             -e GITHUB_REPOSITORY \

.github/workflows/_linux-build.yml

@@ -222,8 +222,6 @@ jobs:
           else
             JENKINS_USER="--user jenkins"
             USED_IMAGE="${DOCKER_IMAGE}"
-            # Fetch aws credential from IMDs
-            eval "$(python3 .github/scripts/get_aws_session_tokens.py)"
           fi
           # detached container should get cleaned up by teardown_ec2_linux
           # Used for JENKINS_USER, which can be empty
@@ -232,9 +230,6 @@ jobs:
             -e BUILD_ENVIRONMENT \
             -e MAX_JOBS="$(nproc --ignore=2)" \
             -e AWS_DEFAULT_REGION \
-            -e AWS_ACCESS_KEY_ID \
-            -e AWS_SECRET_ACCESS_KEY \
-            -e AWS_SESSION_TOKEN \
             -e PR_NUMBER \
             -e SHA1 \
             -e BRANCH \

.github/workflows/_linux-test.yml

@@ -234,8 +234,6 @@ jobs:
           IS_A100_RUNNER: ${{ contains(matrix.runner, 'a100') && '1' || '0' }}
           ARTIFACTS_FILE_SUFFIX: ${{ github.job }}-${{ matrix.config }}-${{ matrix.shard }}-${{ matrix.num_shards }}-${{ matrix.runner }}_${{ steps.get-job-id.outputs.job-id }}
         run: |
-          # Fetch aws credential from IMDs
-          eval "$(python3 .github/scripts/get_aws_session_tokens.py)"
           set -x
 
           if [[ $TEST_CONFIG == 'multigpu' ]]; then
@@ -268,9 +266,6 @@ jobs:
             -e BRANCH \
             -e SHA1 \
             -e AWS_DEFAULT_REGION \
-            -e AWS_ACCESS_KEY_ID \
-            -e AWS_SECRET_ACCESS_KEY \
-            -e AWS_SESSION_TOKEN \
             -e IN_WHEEL_TEST \
             -e SHARD_NUMBER \
             -e TEST_CONFIG \