aws / aws/git-remote-codecommit

Using credential_process results in a 404 error

Offen
#7 3 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
Python
Sterne
289
Forks
40
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

When using an external credential process get-remote-codecommit always returns a 404.

I'm using aws-vault to test this, but your credential_process could be a cat of a json file.

I'm using aws-vault to handle my credentials, this is my configuration:

```
# .aws/config

[profile codecommit]
region=eu-west-1
credential_process = aws-vault exec sandbox-profile --json

[profile tmp]
region=eu-west-1
output=json
```

I verified that aws-vault was working and the credentials where correct by using `sts get-caller-identity` and testing the aws-vault credential output in a temporary profile:

```
aws --profile codecommit sts get-caller-identity
{
"UserId": "AROAIR7P4ZLYKGYCEVD6M:1583408935234570000",
"Account": "XXXXXXXXXXX",
"Arn": "arn:aws:sts::XXXXXXXXXXX:assumed-role/ROLE_NAME/1583408935234570000"
}

aws-vault exec sandbox-profile --json
{"Version":1,"AccessKeyId":"ASIAUBJLRPEKAZ2K7YC4","SecretAccessKey":"XXX","SessionToken":"YYY","Expiration":"2020-03-05T12:10:05Z"}

cat >> ~/.aws/credentails <

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Reproduce the failure with the shown AWS config and git clone commands, then trace how get-remote-codecommit handles credential_process credentials. Done means the codecommit profile works like the temporary profile and the repository clone succeeds without the 403 response.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
aws, git, python
Bereich
cli, cloud, devtools
Issue-Typ
Bug
Schwierigkeit
3/5
Geschätzter Aufwand
1-2 Tage
Aktivitätsstatus
Veraltet
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
35/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.