aws / aws/aws-toolkit-azure-devops

Unable to clear session token from Azure DevOps AWS Service Connection

Open
#466 2 comments 0 reactions 0 assignees View on GitHub
auth bug
Dominant language
TypeScript
Stars
258
Forks
114
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**

Unable to clear out session token from Azure DevOps's service connection, if it was previously assigned.
I have to delete and recreate the service connection to get around this issue.

**To reproduce**

1. Create a new service connection, and enter a valid access key id & secret access key
2. Run pipeline with AWS task, which will run successfully
3. Edit the service connection, enter an invalid session token
4. Rerun same pipeline, which will fail as expected
5. Edit the service connection, reenter the valid access key id & secret access key, and clear the session token field.
6. Rerun pipeline, failed with the error message: An error occurred (UnrecognizedClientException) when calling the GetAuthorizationToken operation: The security token included in the request is invalid

**Expected behavior**

The 3rd attempt to run should success, with only the access key id & secret key passed on to aws task

**Screenshots**

![image](https://user-images.githubusercontent.com/12484975/165017469-ace1cefe-a947-4d60-a05a-9f89f739fed1.png)

**Your Environment**

- On-prem or cloud based? Cloud
- Azure DevOps version:
- AWS Toolkit for Azure DevOps version: 1.13.0

**Additional context**

- Tested using an IAM account's credential without key rotation

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the documented service-connection sequence and trace how the AWS task reads the access key, secret key, and session token after the token field is cleared. Done means rerunning the pipeline succeeds with only the access key id and secret access key passed to the AWS task.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, typescript
Domain
authentication, cloud, devops
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.