https://pulumi.com logo
Powered by
#getting-started
Title
# getting-started
m

miniature-piano-36287

06/10/2022, 8:07 PM
Hello, I’m having problems trying to push changes to AWS with Pulumi, this is what I’ve done • deleted node_modules directory • deleted package-lock.json file • moved pulumi dependencies to devDependencies in package.json • ran 
npm install
• I’m using multiple profiles in 
/Users/myUser/.aws/credentials
file so i export the variable 
AWS_PROFILE
with the desire profile And when i run 
pulumi up -y --debug
I have the following output
Copy code
View Live: <https://app.pulumi.com/username-Company/my-project/staging/previews/a28a6c6f-a248-422b-b6c3-69952ba24b25>

     Type                 Name                     Plan     Info
     pulumi:pulumi:Stack  my-project-staging           1 error; 84 debugs
 
Diagnostics:
  pulumi:pulumi:Stack (my-project-staging):
    debug: AWS Auth provider used: "SharedCredentialsProvider"
    debug: Retrieved credentials from "SharedConfigCredentials: /Users/myUser/.aws/credentials"
    debug: Trying to get account information via iam:GetUser
    debug: [aws-sdk-go-v2] Request
    debug: POST / HTTP/1.1
    debug: Host: <http://iam.amazonaws.com|iam.amazonaws.com>
    debug: User-Agent: APN/1.0 Pulumi/1.0 Pulumi/1.0 Pulumi-Aws/0.11+compatible (+<https://www.pulumi.com>) aws-sdk-go-v2/1.16.4 os/macos lang/go/1.17.10 md/GOOS/darwin md/GOARCH/amd64 api/iam/1.18.4
    debug: Content-Length: 33
    debug: Amz-Sdk-Invocation-Id: 9d4bcd52-bf3a-4820-bc86-63bdb833c373
    debug: Amz-Sdk-Request: attempt=1; max=25
    debug: Authorization: AWS4-HMAC-SHA256 Credential=ASIAZLSIADTQEYX46VWB/20220610/us-east-1/iam/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date;x-amz-security-token, Signature=ba167d321ee0a3f44bb00c3292f7c49f48b67acb08da69994c6eb89e60104d22
    debug: Content-Type: application/x-www-form-urlencoded
    debug: X-Amz-Date: 20220610T195843Z
    debug: X-Amz-Security-Token: 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
    debug: Accept-Encoding: gzip
    debug: 
    debug: Action=GetUser&Version=2010-05-08
    debug: [aws-sdk-go-v2] Response
    debug: HTTP/1.1 400 
    debug: Connection: close
    debug: Content-Length: 307
    debug: Content-Type: text/xml
    debug: Date: Fri, 10 Jun 2022 19:58:43 GMT
    debug: X-Amzn-Requestid: 300c43be-4343-4126-ae6c-f90061c7478b
    debug: 
    debug: <ErrorResponse xmlns="<https://iam.amazonaws.com/doc/2010-05-08/>">
    debug:   <Error>
    debug:     <Type>Sender</Type>
    debug:     <Code>ValidationError</Code>
    debug:     <Message>Must specify userName when calling with non-User credentials</Message>
    debug:   </Error>
    debug:   <RequestId>300c43be-4343-4126-ae6c-f90061c7478b</RequestId>
    debug: </ErrorResponse>
    debug: [aws-sdk-go-v2] request failed with unretryable error https response error StatusCode: 400, RequestID: 300c43be-4343-4126-ae6c-f90061c7478b, api error ValidationError: Must specify userName when calling with non-User credentials
    debug: Ignoring iam:GetUser error: operation error IAM: GetUser, https response error StatusCode: 400, RequestID: 300c43be-4343-4126-ae6c-f90061c7478b, api error ValidationError: Must specify userName when calling with non-User credentials
    debug: Trying to get account information via sts:GetCallerIdentity
    debug: [aws-sdk-go-v2] Request
    debug: POST / HTTP/1.1
    debug: Host: <http://sts.us-east-1.amazonaws.com|sts.us-east-1.amazonaws.com>
    debug: User-Agent: APN/1.0 Pulumi/1.0 Pulumi/1.0 Pulumi-Aws/0.11+compatible (+<https://www.pulumi.com>) aws-sdk-go-v2/1.16.4 os/macos lang/go/1.17.10 md/GOOS/darwin md/GOARCH/amd64 api/sts/1.16.4
    debug: Content-Length: 43
    debug: Amz-Sdk-Invocation-Id: 7f34d0a8-ebd0-4a4f-913b-ec9f3c770d79
    debug: Amz-Sdk-Request: attempt=1; max=25
    debug: Authorization: AWS4-HMAC-SHA256 Credential=ASIAZLSIADTQEYX46VWB/20220610/us-east-1/sts/aws4_request, SignedHeaders=amz-sdk-invocation-id;amz-sdk-request;content-length;content-type;host;x-amz-date;x-amz-security-token, Signature=7bd2c6a7b162c260ea98c9f8734c039f07158797f3636aeb8a293e2acb38e693
    debug: Content-Type: application/x-www-form-urlencoded
    debug: X-Amz-Date: 20220610T195844Z
    debug: X-Amz-Security-Token: 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
    debug: Accept-Encoding: gzip
    debug: 
    debug: Action=GetCallerIdentity&Version=2011-06-15
    debug: Registering resource: t=pulumi:pulumi:Stack, name=my-project-staging, custom=false, remote=false
    debug: RegisterResource RPC prepared: t=pulumi:pulumi:Stack, name=my-project-staging
    debug: RegisterResource RPC finished: resource:my-project-staging[pulumi:pulumi:Stack]; err: null, resp: urn:pulumi:staging::my-project::pulumi:pulumi:Stack::my-project-staging,,,,
    debug: [aws-sdk-go-v2] Response
    debug: HTTP/1.1 200 OK
    debug: Content-Length: 505
    debug: Content-Type: text/xml
    debug: Date: Fri, 10 Jun 2022 19:58:43 GMT
    debug: X-Amzn-Requestid: 85ae4a1e-1df0-4a72-abf8-e3e5fac1a9ee
    debug: 
    debug: <GetCallerIdentityResponse xmlns="<https://sts.amazonaws.com/doc/2011-06-15/>">
    debug:   <GetCallerIdentityResult>
    debug:     <Arn>arn:aws:sts::8852224923:assumed-role/AWSReservedSSO_gti-aws-workload-admin_216facc0f87bf10d/username@Company.com</Arn>
    debug:     <UserId>AROAZLSIADTQGWBLS5UOF:username@Company.com</UserId>
    debug:     <Account>8852224923</Account>
    debug:   </GetCallerIdentityResult>
    debug:   <ResponseMetadata>
    debug:     <RequestId>85ae4a1e-1df0-4a72-abf8-e3e5fac1a9ee</RequestId>
    debug:   </ResponseMetadata>
    debug: </GetCallerIdentityResponse>
    debug: Running program '/Users/myUser/Documents/Company/Github/my-project' in pwd '/Users/myUser/Documents/Company/Github/my-project' w/ args: 
    debug: Invoking function: tok=aws:ssm/getParameter:getParameter asynchronously
    debug: Invoking function: tok=aws:ssm/getParameter:getParameter asynchronously
    debug: Invoking function: tok=aws:ssm/getParameter:getParameter asynchronously
    debug: , obj={"name":"/elasticache/redis/dc/port"}
    debug: , obj={"name":"/elasticache/redis/dc/primary"}
    debug: , obj={"name":"/elasticache/redis/dc/reader"}
    debug: RegisterResourceOutputs RPC prepared: urn=urn:pulumi:staging::my-project::pulumi:pulumi:Stack::my-project-staging
    debug: RegisterResourceOutputs RPC finished: urn=urn:pulumi:staging::my-project::pulumi:pulumi:Stack::my-project-staging; err: null, resp: 
    debug: RegisterResourceOutputs RPC finished: urn=urn:pulumi:staging::my-project::pulumi:pulumi:Stack::my-project-staging; err: null, resp: 
    debug: Using shared credentials files from configuration: [""]
    debug: Invoke RPC finished: tok=aws:ssm/getParameter:getParameter; err: Error: 2 UNKNOWN: invocation of aws:ssm/getParameter:getParameter returned an error: unable to validate AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration, resp: undefined
    error: Error: invocation of aws:ssm/getParameter:getParameter returned an error: unable to validate AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration
        at Object.callback (/Users/myUser/Documents/Company/Github/my-project/node_modules/@pulumi/runtime/invoke.ts:159:33)
        at Object.onReceiveStatus (/Users/myUser/Documents/Company/Github/my-project/node_modules/@grpc/grpc-js/src/client.ts:338:26)
        at Object.onReceiveStatus (/Users/myUser/Documents/Company/Github/my-project/node_modules/@grpc/grpc-js/src/client-interceptors.ts:426:34)
        at Object.onReceiveStatus (/Users/myUser/Documents/Company/Github/my-project/node_modules/@grpc/grpc-js/src/client-interceptors.ts:389:48)
        at /Users/myUser/Documents/Company/Github/my-project/node_modules/@grpc/grpc-js/src/call-stream.ts:276:24
        at processTicksAndRejections (internal/process/task_queues.js:77:11)
    debug: Invoke RPC finished: tok=aws:ssm/getParameter:getParameter; err: Error: 2 UNKNOWN: invocation of aws:ssm/getParameter:getParameter returned an error: unable to validate AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration, resp: undefined
    debug: Invoke RPC finished: tok=aws:ssm/getParameter:getParameter; err: Error: 2 UNKNOWN: invocation of aws:ssm/getParameter:getParameter returned an error: unable to validate AWS AccessKeyID and/or SecretAccessKey - see <https://pulumi.io/install/aws.html> for details on configuration, resp: undefined
Does anyone knows what could be the error?
b

billowy-army-68599

06/10/2022, 8:46 PM
can you run 
pulumi about
and show which version of 
pulumi-aws
you're using?
m

miniature-piano-36287

06/10/2022, 8:50 PM
Copy code
CLI          
Version      3.34.0
Go Version   go1.17.10
Go Compiler  gc

Plugins
NAME            VERSION
aws             5.7.2
aws             4.38.1
aws-apigateway  0.0.6
docker          3.2.0
nodejs          unknown

Host     
OS       darwin
Version  12.4
Arch     x86_64

This project is written in nodejs: executable='/Users/username/.nvm/versions/node/v14.17.3/bin/node' version='v14.17.3'

Current Stack: staging

TYPE                                               URN
pulumi:pulumi:Stack                                urn:pulumi:staging::my-project::pulumi:pulumi:Stack::my-project-staging
pulumi:providers:aws                               urn:pulumi:staging::my-project::pulumi:providers:aws::default_5_6_0
aws:iam/role:Role                                  urn:pulumi:staging::my-project::aws:iam/role:Role::my-project-staging-test-dc
aws:iam/rolePolicyAttachment:RolePolicyAttachment  urn:pulumi:staging::my-project::aws:iam/rolePolicyAttachment:RolePolicyAttachment::my-project-staging-test-dc-LambdaExecution
aws:iam/rolePolicyAttachment:RolePolicyAttachment  urn:pulumi:staging::my-project::aws:iam/rolePolicyAttachment:RolePolicyAttachment::my-project-staging-test-dc-VPCAccess
aws:iam/rolePolicyAttachment:RolePolicyAttachment  urn:pulumi:staging::my-project::aws:iam/rolePolicyAttachment:RolePolicyAttachment::my-project-staging-test-dc-SecretsManagerRead
aws:iam/rolePolicyAttachment:RolePolicyAttachment  urn:pulumi:staging::my-project::aws:iam/rolePolicyAttachment:RolePolicyAttachment::my-project-staging-test-dc-XRayDaemonAccess
aws:lambda/function:Function                       urn:pulumi:staging::my-project::aws:lambda/function:Function::my-project-staging-test-dc


Found no pending operations associated with staging

Backend        
Name           <http://pulumi.com|pulumi.com>
URL            <https://app.pulumi.com/username-company>
User           username-company
Organizations  username-company, company2

Dependencies:
NAME                      VERSION
@types/node               14.18.21
@company2/data-catalog    2.0.0
@company2/gtc-pulumi-2    2.7.0
@pulumi/aws               5.7.2
@pulumi/awsx              0.40.0

Pulumi locates its logs in /var/folders/j7/nysdbmb90k54znt_f8080w8h0000gn/T/ by default
39 Views
Powered by