duo-labs / duo-labs/cloudmapper

Cloudmapper fails for Hong Kong (and probably Bahrain) resources

Open
#538 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
6.3k
Forks
836
PR merge metrics
No merged PRs in 30d

Description

I encountered this problem for Hong Kong, but this will probably be the same for Bahrain.
All collect calls encounter the same error response - `An error occurred (InvalidClientTokenId) when calling the AssumeRole operation: The security token included in the request is invalid.`

I believe the source of this is `Session tokens from the global STS endpoint (https://sts.amazonaws.com) are valid only in AWS Regions that are enabled by default. If you intend to enable a new Region for your account, you can either use session tokens from regional STS endpoints or activate the global STS endpoint to issue session tokens that are valid in all AWS Regions.` (https://console.aws.amazon.com/billing/home?#/account?AWS-Regions)

Cloudmapper needs to support regional STS endpoints to receive the correct session token to query this type of regions.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.