I need to figure out how to deploy to separate dev/prod AWS accounts. It is not clear how deploy decides to use AWS ACCESS Keys and SECRET Keys for each env. Right now, there's a global environment variable set, do I override that in the prod deploy environment variables?
Yeah, just override it in the deployment environment's variable settings.
We do this by keeping a aws credentials file on disk with all the different accounts included, then tell each environment which aws credential 'profile' it should use.
By default your OS will use the first entry in $BAMBOO_USER_HOME/.aws/credentials unless you tell it explicitly which profile it should use via an environment variable