aws / aws/aws-toolkit-azure-devops

AWS Toolkit tasks blocked by custom task whitelist in Azure DevOps organization

Open
#598 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
258
Forks
114
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**

My pipelines in Azure DevOps can't use a specific task from the "AWS Toolkit for Azure DevOps" extension. I get an error saying the tasks aren't allowed. The specific task I need is "InstallAWSCredentials@1" so that I can authenticate a bash script into AWS using an ADO Service Connection. Multiple LLMs have suggested this task to accomplish what I need (though I can't find any documentation on it... is it an actual task?). The FQDN of the task would be AmazonWebServices.aws-vsts-tools.InstallAWSCredentials@1.

The reason I'm trying this is because I originally tried:

```
- task: AWSShellScript@1
displayName: "Restart services via SSM for ${{ parameters.environment }}"
inputs:
awsCredentials: '$(awsCredentials)'
```
This method just hung, however, and failed to ever get to the actual script. The log output was the following (until I cancelled):

```
Configuring credentials for task
...configuring AWS credentials from service endpoint '**guid**'
...configuring AWS credentials from service endpoint '**guid**'
Skipping OIDC: not enabled in service connections
...configuring AWS credentials from service endpoint '**guid**'
...endpoint defines standard access/secret key credentials
Configuring region for task
...configured to use region us-east-1, defined in task.
/usr/bin/bash
```

**To reproduce**

1. I have the "AWS Toolkit for Azure DevOps" extension installed (version 1.20.0).
2. I try to create or edit a pipeline and the following task `InstallAWSCredentials@1`.
3. When I try to save or run the pipeline, I see an error message.

**Expected behavior**

The pipeline should accept the AWS task and let me save/run the pipeline without any errors about "invalid" tasks.

**Screenshots**

* **AWS Toolkit installed:**

![Image](https://github.com/user-attachments/assets/e2c068bd-a9ed-41a8-94fb-2d0f60c02d27)

* **Pipeline error: - Org not recognizing task**

![Image](https://github.com/user-attachments/assets/166dd960-4d59-4b54-acbe-ed1c8fe32860)

**Your Environment**

* **Where is your Azure DevOps?:** It's the cloud version (Azure DevOps Services).
* **Azure DevOps version:** It's always up-to-date since it's the cloud version.
* **AWS Toolkit for Azure DevOps version:** 1.20.0 (This is the latest version, updated March 19, 2025).

**Additional context**

* I'm the main admin for my Azure DevOps setup.
* I can't see an option called "Decorators" in my Azure DevOps settings, which usually helps manage these kinds of rules.
* I also tried to check for decorators using a special command (an API call), but it told me the tool for checking decorators wasn't found or wasn't turned on for my account. This means the rules blocking AWS tasks aren't managed in the usual way.
* Azure DevOps support told me they don't help directly with extensions from their marketplace, so I'm coming to you.

Contributor guide

Open the contributing guide

Research direction

No repository file or test is named in the report. Start by verifying whether InstallAWSCredentials@1 exists in AWS Toolkit for Azure DevOps 1.20.0 and reproduce the Azure DevOps Services rejection, then compare it with the provided AWSShellScript@1 pipeline. Done means establishing whether the failure comes from the extension or an organization task whitelist and documenting the supported resolution.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, azure, typescript
Domain
cloud, devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.