aws / aws/aws-toolkit-azure-devops

AWS Service Endpoint ADFS support?

Open
#289 4 comments 0 reactions 0 assignees View on GitHub
feature-request
Dominant language
TypeScript
Stars
258
Forks
114
PR merge metrics
No merged PRs in 30d

Description

Our aws account is configured to use sts (ADFS provider). I have configured the aws service endpoint to use the access key and access key of a windows account. When the pipeline with the aws endpoint fails with the error Agent job: "InvalidClientTokenId: The security token included in the request is invalid."

**Your Environment**
- Azure Devops
- AWS VSTS Tools version: latest version from the marketplace

Here is the log extract from azure devops pipeline...
...configuring AWS credentials from service endpoint '0bae1580-b793-4a08-ae22-ece5aa6d072e'
...endpoint defines role-based credentials for role ***.
##[debug]aws.rolecredential.maxduration=undefined
##[debug]task result: Failed
##[error]InvalidClientTokenId: The security token included in the request is invalid.
##[debug]Processed: ##vso[task.issue type=error;]InvalidClientTokenId: The security token included in the request is invalid.
##[debug]Processed: ##vso[task.complete result=Failed;]InvalidClientTokenId: The security token included in the request is invalid.
Finishing: AWS CLI: ec2

Contributor guide

Open the contributing guide

Research direction

No source file or test is named in the issue. Start by reproducing the AWS CLI: ec2 pipeline failure with the Azure DevOps service endpoint and its ADFS-based STS credentials, then trace how role-based credentials are configured; done means an ADFS-configured endpoint can authenticate successfully and complete the pipeline operation.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure
Domain
authentication, cloud
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.