This message was deleted.

sparse-intern-71089

11/15/2023, 3:54 PM

This message was deleted.

miniature-musician-31262

11/15/2023, 4:27 PM

How are you setting your AWS credentials?

miniature-musician-31262

11/15/2023, 4:28 PM

Are you using one of the methods described here (and if so, which)? https://www.pulumi.com/registry/packages/aws/installation-configuration/#configuration

miniature-musician-31262

11/15/2023, 4:34 PM

I'm also curious whether this repros with something completely vanilla, and in a new shell, to rule out an issue specific to the current environment or program.

miniature-musician-31262

11/15/2023, 4:37 PM

For example,

Copy code

export AWS_PROFILE=default
pulumi new aws-python --yes && pulumi up

If that works, then the issue is specific to the program you shared in the earlier thread.

bored-car-93231

11/15/2023, 4:53 PM

credentials are set through aws configure, so it's in the aws credentials file but I have also export the value in the local environment. I'm working inside a poetry venv but have tried without the venv with no change to the issue. same issue with the command you shared (credential info scrubbed, albeit original is correct): Type Name + pulumipulumiStack demo-dev └─ pulumiprovidersaws default_6_8_0 Diagnostics: pulumiprovidersaws (default_6_8_0): error: rpc error: code = Unknown desc = unable to validate AWS credentials. Details: validating provider credentials: retrieving caller identity from STS: operation error STS: GetCallerIdentity, https response error StatusCode: 400, RequestID: e03d6756-647d-44a3-8e70-f5b5df16761c, api error IncompleteSignature: '/20231115/us-east-1/sts/aws4_request' not a valid key=value pair (missing equal-sign) in Authorization header: 'AWS4-HMAC-SHA256 Credential=AKA5PSXE3 /20231115/us-east-1/sts/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date, Signature=1906fc70039ecb24abe2160823b589647307e6c7bd661fae1d5253'. Make sure you have set your AWS region, e.g.

pulumi config set aws:region us-west-2

. NEW: You can use Pulumi ESC to set up dynamic credentials with AWS OIDC to ensure the correct and valid credentials are used. Learn more: https://www.pulumi.com/blog/esc-env-run-aws/

bored-car-93231

11/15/2023, 4:58 PM

Happy to jump on a quick call.

clever-sunset-76585

11/15/2023, 5:24 PM

@bored-car-93231 DM me and we'll figure out a time for a call.

clever-sunset-76585

11/15/2023, 9:08 PM

For posterity, there was a stray trailing tab character in the

credentials

file. Fixing that did the trick.

💯 1

😲 1

9 Views

Open in Slack

Previous Next

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.