duo-labs / duo-labs/cloudmapper
Unable to collect data when assuming role
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
I am running cloudmapper on **docker** and i got this issue:
```
aws sts assume-role --role-arn "arn:aws:iam::XXXXXXXXX:role/read-user" --role-session-name random_name
export AWS_ACCESS_KEY_ID=XXXXXX
export AWS_SECRET_ACCESS_KEY=XXXXX
export AWS_SESSION_TOKEN=XXXXXXX
export AWS_PROFILE=XXXXX
export $(aws-vault exec read-user --no-session -- env | grep ^AWS | xargs) && docker run -ti -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY -p 8000:8000 cloudmapper /bin/bash
python cloudmapper.py configure add-account --config-file config.json --name my_aws_user_account --id XXXXXXXXX
python cloudmapper.py collect --profile xxxxx --config config.json --account my_aws_user_account
```
> ** Getting region names**
> Traceback (most recent call last):
> File "cloudmapper.py", line 72, in
> main()
> File "cloudmapper.py", line 66, in main
> commands[command].run(arguments)
> File "/opt/cloudmapper/commands/collect.py", line 604, in run
> collect(args)
> File "/opt/cloudmapper/commands/collect.py", line 278, in collect
> region_list = ec2.describe_regions()
> File "/usr/local/lib/python3.7/site-packages/botocore/client.py", line 316, in _api_call
> return self._make_api_call(operation_name, kwargs)
> File "/usr/local/lib/python3.7/site-packages/botocore/client.py", line 635, in _make_api_call
> raise error_class(parsed_response, operation_name)
> botocore.exceptions.ClientError: An error occurred (UnauthorizedOperation) when calling the DescribeRegions operation: You are not authorized to perform this operation.
Since, I don't have any right on `my_aws_user_account` I am assuming role to perform this task.
AM I doing everything right ?
Thank you for your help !
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.