I have a repl with the where i am experimenting with aws-api it uses the default profile creds which expires. when the profile creds are renewed the code still uses the expired creds. i was reading through the docs and the code to figure out what i should be doing differently but havent come across anything. seems like cached-credentials-with-auto-refresh is called for profiles so i am assuming that the creds should auto refresh https://github.com/cognitect-labs/aws-api/blob/master/src/cognitect/aws/credentials.clj#L233

(def secretsmanager-client
  (aws/client
   {:api :secretsmanager
    :region "us-west-2"}))