aws / aws/aws-toolkit-azure-devops
AWS Service Endpoint ADFS support?
- Dominant language
- TypeScript
- Stars
- 258
- Forks
- 114
- PR merge metrics
- No merged PRs in 30d
Description
Our aws account is configured to use sts (ADFS provider). I have configured the aws service endpoint to use the access key and access key of a windows account. When the pipeline with the aws endpoint fails with the error Agent job: "InvalidClientTokenId: The security token included in the request is invalid."
**Your Environment**
- Azure Devops
- AWS VSTS Tools version: latest version from the marketplace
Here is the log extract from azure devops pipeline...
...configuring AWS credentials from service endpoint '0bae1580-b793-4a08-ae22-ece5aa6d072e'
...endpoint defines role-based credentials for role ***.
##[debug]aws.rolecredential.maxduration=undefined
##[debug]task result: Failed
##[error]InvalidClientTokenId: The security token included in the request is invalid.
##[debug]Processed: ##vso[task.issue type=error;]InvalidClientTokenId: The security token included in the request is invalid.
##[debug]Processed: ##vso[task.complete result=Failed;]InvalidClientTokenId: The security token included in the request is invalid.
Finishing: AWS CLI: ec2
Contributor guide
Research direction
No source file or test is named in the issue. Start by reproducing the AWS CLI: ec2 pipeline failure with the Azure DevOps service endpoint and its ADFS-based STS credentials, then trace how role-based credentials are configured; done means an ADFS-configured endpoint can authenticate successfully and complete the pipeline operation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, azure
- Domain
- authentication, cloud
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100