You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@libcloud.apache.org by "Zach Carlson (JIRA)" <ji...@apache.org> on 2016/03/31 07:44:25 UTC
[jira] [Updated] (LIBCLOUD-606) Can not connect to AWS with IAM
role temporary credentials
[ https://issues.apache.org/jira/browse/LIBCLOUD-606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Zach Carlson updated LIBCLOUD-606:
----------------------------------
Attachment: ec2-unbreak-token-auth.patch
Token being passed into the EC2NodeDriver was not being used to initialize the connection object; this patch will fix that.
> Can not connect to AWS with IAM role temporary credentials
> ----------------------------------------------------------
>
> Key: LIBCLOUD-606
> URL: https://issues.apache.org/jira/browse/LIBCLOUD-606
> Project: Libcloud
> Issue Type: Bug
> Components: Compute
> Reporter: Katriel Traum
> Priority: Minor
> Attachments: ec2-unbreak-token-auth.patch, test_iam.py
>
>
> Can not connect to AWS with IAM role temporary credentials.
> Using key, secret and token, with debug enabled, I get the following headers:
> # -------- begin 44002048 request ----------
> curl -i -X GET -H 'Host: ec2.eu-west-1.amazonaws.com' -H 'X-LC-Request-ID: 44002048' -H 'Accept-Encoding: gzip,deflate' -H 'User-Agent: libcloud/0.15.1 (Amazon EC2 (eu-west-1)) ' --compress 'https://ec2.eu-west-1.amazonaws.com:443/?SignatureVersion=2&AWSAccessKeyId=<REDACTED>&Timestamp=2014-08-21T14%3A45%3A19Z&SignatureMethod=HmacSHA256&Version=2013-10-15&Signature=<REDACTED>&Action=DescribeInstances'
> # -------- begin 44002048:44002696 response ----------
> HTTP/1.1 401 Unauthorized^M
> Transfer-Encoding: chunked^M
> Date: Thu, 21 Aug 2014 14:45:19 GMT^M
> Server: AmazonEC2^M
> ^M
> fe^M
> <?xml version="1.0" encoding="UTF-8"?>
> <Response><Errors><Error><Code>AuthFailure</Code><Message>AWS was not able to validate the provided access credentials</Message></Error></Errors><RequestID>5032a22a-e2d2-45f6-be8f-92d3294d1aec</RequestID></Response>^M
> 0^M
> # -------- end 44002048:44002696 response ----------
> It doesn't seem like the supplied token is in the header
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)