Azure Devops YML pipeline error for aws keys - amazon-web-services

I am getting below error while running Azure DevOps Pipeline. I have added correct AWS 'Access key' and 'Secret Access key'. However it is still failing.
I checked from backend windows server. It is working fine manually but giving below error when I run the pipeline. Not sure what is missing, can please you suggest ?
Note: I am using IAM role to access the AWS environment and providing 'keys' of same role
An error occurred (SignatureDoesNotMatch) when calling the AssumeRole operation: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.
Cannot index into a null array.

Related

How to get ECR_AWS_ACCESS_KEY and ECR_AWS_SECRET_ACCESS_KEY

So I've just been handed over to a project using AWS and gitlab. The pipeline was working before but then we moved the organization into another larger organization (Not sure if this is relevant or not).
But I'm getting the error
(UnrecognizedClientException) when calling the GetAuthorizationToken operation: The security token included in the request is invalid.
How do I get the ECR_AWS_ACCESS_KEY_ID and ECR_AWS_SECRET_ACCESS_KEY from a particular IAM User?
The error indicates that the credentials used by the pipeline are not valid.
How do I get the ECR_AWS_ACCESS_KEY_ID and ECR_AWS_SECRET_ACCESS_KEY from a particular IAM User?
There's no such thing. You should be using AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY. Setup an IAM user with programmatic access with the required permissions and then use the credentials associated with said user.

Terraform: Deleted AWS keys before running Terraform Destroy

I have created some resources in AWS using TF these were used using the aws access and secret key. I accidentally deleted those keys not realising I needed to use TF destroy.
I have created new keys but I'm guessing TF requires the original keys.
I get this error
Error: error configuring Terraform AWS Provider: error validating provider credentials: error calling sts:GetCallerIdentity: SignatureDoesNotMatch: The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.
How do I get around this?

AWS Sagemaker on local machine: Invalid security token included in the request

I am trying to get AWS Sagemaker to run locally. I found this jupyter notebook
https://gitlab.com/juliensimon/aim410/-/blob/master/local_training.ipynb
I logged into AWS via saml2aws and hence have valid credentials, entered my specific region as well as the Sagemaker Execution Role ARN and specify below the specific image I want to pull.
However when starting the .fit() i getthe following ClientError:
ClientError: An error occurred (InvalidClientTokenId) when calling the GetCallerIdentity operation: The security token included in the request is invalid.
Can someone give my a hint or suggestion how to solve this issue?
Thanks!
Try to verify your AWS credentials are setup properly, bypassing Boto3, by running a cell with something like:
!aws sagemaker list-endpoints
If this fails, then your AWS CLI credentials aren't setup correctly, or your saml2aws process, or your role has no SageMaker permissions.

An error occurred (UnrecognizedClientException) when calling the ListTopicRules operation: The security token included in the request is invalid

I got this error when using aws CLI, following the tutorial shows below to configuring the AWS CLI, I can only set up the AWS Access Key ID and AWS Secret Access Key. Where can I set the security token?
https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html
I found the answer to this. It might seem very simple though.
Basically you were following the tutorial literally, which means you most probably input the exact AWS Access Key ID and AWS Secret Access Key mentioned in the tutorial.
However, those keys in red are just examples. What you should use are the keys from your own AWS account, i.e. My Security Credentials.

Verifying AWS Command Line Interface credentials are configured correctly

I seem to have problems running a command to verify that my credentials are configured correctly and that I can connect to AWS as stated here:https://docs.aws.amazon.com/cli/latest/userguide/tutorial-ec2-ubuntu.html:
When running:
$ aws ec2 describe-regions --output table
I get the following output:
An error occurred (AuthFailure) when calling the DescribeRegions
operation: AWS was not able to validate the provided access
credentials
What am I missing?
After installing the AWS CLI (on a fedora machine), I ran
$ aws configure
for AWS Access Key ID and AWS Secret Access Key:
I went to AWS website and created an IAM user.
For that user, I have gone to the security credentials tab and
I have created a new Access key, which is key value pair of Access key ID,Secret access key.
I have used those values for AWS Access Key ID and AWS Secret Access Key but I keep getting the above error message.
What am I missing? Thanks in advance.
You need to pass the profile parameter. This link from AWS has more details