aws / aws/aws-toolkit-vscode

AccessDeniedException Exception is occuring when connecting Amazon Q in VS Code

Open
#7,563 1 comment 0 reactions 0 assignees View on GitHub
bug
Dominant language
TypeScript
Stars
2k
Forks
807
Avg merge
10h 12m
Merged PRs (30d)
7

Description

## Problem
AccessDeniedException when trying to connect Amazon Q in Visual Studio Code

## Steps to reproduce the issue

## Expected behavior
It should connect successfully
## System details (run `AWS: About` and/or `Amazon Q: About`)

**Note : Able to connect the AWS Toolkit extension**
- OS: Win 11
- Visual Studio Code version:1.101.2
- AWS Toolkit version:3.67.0
- Amazon Q version:1.79.0

[error] API response (oidc.us-east-1.amazonaws.com /token): {
name: 'AccessDeniedException',
'$fault': 'client',
'$metadata': {
httpStatusCode: 400,
requestId: '4dc8bf48-cfad-4d7a-8bcd-ffdb07dd4fd8',
extendedRequestId: undefined,
cfId: undefined
},
error: 'access_denied',
error_description: 'Access denied',
reason: null,
message: 'UnknownError'
}

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the connection attempt in Visual Studio Code with the reported Windows, AWS Toolkit, and Amazon Q versions, then inspect the OIDC /token response for the AccessDeniedException. Compare the Amazon Q authentication path with the working AWS Toolkit connection. Done means Amazon Q connects successfully without the reported access-denied response.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript, vscode
Domain
authentication, devtools
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.