# getting-started


11/15/2023, 3:54 PM
Can I get some help here? I'm unable to a simple deployment even though credentials are correct.


11/15/2023, 4:27 PM
How are you setting your AWS credentials?
Are you using one of the methods described here (and if so, which)?
I'm also curious whether this repros with something completely vanilla, and in a new shell, to rule out an issue specific to the current environment or program.
For example,
Copy code
export AWS_PROFILE=default
pulumi new aws-python --yes && pulumi up
If that works, then the issue is specific to the program you shared in the earlier thread.


11/15/2023, 4:53 PM
credentials are set through aws configure, so it's in the aws credentials file but I have also export the value in the local environment. I'm working inside a poetry venv but have tried without the venv with no change to the issue. same issue with the command you shared (credential info scrubbed, albeit original is correct): Type Name + pulumipulumiStack demo-dev └─ pulumiprovidersaws default_6_8_0 Diagnostics: pulumiprovidersaws (default_6_8_0): error: rpc error: code = Unknown desc = unable to validate AWS credentials. Details: validating provider credentials: retrieving caller identity from STS: operation error STS: GetCallerIdentity, https response error StatusCode: 400, RequestID: e03d6756-647d-44a3-8e70-f5b5df16761c, api error IncompleteSignature: '/20231115/us-east-1/sts/aws4_request' not a valid key=value pair (missing equal-sign) in Authorization header: 'AWS4-HMAC-SHA256 Credential=AKA5PSXE3 /20231115/us-east-1/sts/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date, Signature=1906fc70039ecb24abe2160823b589647307e6c7bd661fae1d5253'. Make sure you have set your AWS region, e.g.
pulumi config set aws:region us-west-2
. NEW: You can use Pulumi ESC to set up dynamic credentials with AWS OIDC to ensure the correct and valid credentials are used. Learn more:
Happy to jump on a quick call.


11/15/2023, 5:24 PM
@bored-car-93231 DM me and we'll figure out a time for a call.
For posterity, there was a stray trailing tab character in the
file. Fixing that did the trick.