Can I get some help here I m unable to a simple deployment e Pulumi Community #getting-started

Can I get some help here? I'm unable to a simple d...

bored-car-93231

11/15/2023, 3:54 PM

Can I get some help here? I'm unable to a simple deployment even though credentials are correct. https://github.com/pulumi/pulumi-aws/issues/2986

miniature-musician-31262

11/15/2023, 4:27 PM

How are you setting your AWS credentials?

miniature-musician-31262

11/15/2023, 4:28 PM

Are you using one of the methods described here (and if so, which)? https://www.pulumi.com/registry/packages/aws/installation-configuration/#configuration

miniature-musician-31262

11/15/2023, 4:34 PM

I'm also curious whether this repros with something completely vanilla, and in a new shell, to rule out an issue specific to the current environment or program.

miniature-musician-31262

11/15/2023, 4:37 PM

For example,

Copy code

export AWS_PROFILE=default
pulumi new aws-python --yes && pulumi up

If that works, then the issue is specific to the program you shared in the earlier thread.

bored-car-93231

11/15/2023, 4:53 PM

credentials are set through aws configure, so it's in the aws credentials file but I have also export the value in the local environment. I'm working inside a poetry venv but have tried without the venv with no change to the issue. same issue with the command you shared (credential info scrubbed, albeit original is correct): Type Name + pulumipulumiStack demo-dev └─ pulumiprovidersaws default_6_8_0 Diagnostics: pulumiprovidersaws (default_6_8_0): error: rpc error: code = Unknown desc = unable to validate AWS credentials. Details: validating provider credentials: retrieving caller identity from STS: operation error STS: GetCallerIdentity, https response error StatusCode: 400, RequestID: e03d6756-647d-44a3-8e70-f5b5df16761c, api error IncompleteSignature: '/20231115/us-east-1/sts/aws4_request' not a valid key=value pair (missing equal-sign) in Authorization header: 'AWS4-HMAC-SHA256 Credential=AKA5PSXE3 /20231115/us-east-1/sts/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date, Signature=1906fc70039ecb24abe2160823b589647307e6c7bd661fae1d5253'. Make sure you have set your AWS region, e.g.

pulumi config set aws:region us-west-2

. NEW: You can use Pulumi ESC to set up dynamic credentials with AWS OIDC to ensure the correct and valid credentials are used. Learn more: https://www.pulumi.com/blog/esc-env-run-aws/

bored-car-93231

11/15/2023, 4:58 PM

Happy to jump on a quick call.

clever-sunset-76585

11/15/2023, 5:24 PM

@bored-car-93231 DM me and we'll figure out a time for a call.

clever-sunset-76585

11/15/2023, 9:08 PM

For posterity, there was a stray trailing tab character in the

credentials

file. Fixing that did the trick.

4 Views

Open in Slack

Previous Next