Questions tagged [assume-role]

67 questions
4
votes
1 answer

Quicksight Dashboard Embed url showing us-east-1 not eu-west-1

Problem: I want to programmatically fetch a quicksight dashboard URL through the SDK, (dashboard in region: eu-west-1) however whenever I use the following regions I get the following errors when I use the following regions: eu-west-1: Error:…
4
votes
1 answer

AWS Amplify with repository in different account - assume role

I have gone through the documents and couldn't find a solution for this.. I have two accounts dev and prod. my amplify app exist in dev but code-commit exist prod. Is there any way to connect them? I have configured assume-role and have also tried…
3
votes
1 answer

AWS .Net API - The provided token has expired

I am facing this weird scenario. I generate my AWS AccessKeyId, SecretAccessKey and SessionToken by running assume-role-with-saml command. After copying these values to .aws\credentials file, I try to run command "aws s3 ls" and can see all the S3…
3
votes
1 answer

AssumeRoleResult not returning anything

I am trying to fetch temporary security credentials and use them to push/publish data on the Kinesis stream. Please check below code for obtaining credentials. private AssumeRoleResult getAssumeRoleResult() { AssumeRoleResult assumeRoleResult =…
3
votes
1 answer

Failed to assume role for third-party AWS account using IAM user's access key

I am trying to give a third-party AWS Account access to my AWS Account using Assume Role function with SecurityAudit role, similar to here. I followed the explanation from this to assign the third-party account the role called testing where I will…
3
votes
1 answer

Is it possible to assume a role from a running task in ECS?

I'm looking for an example of how to assume a role from within a running application within ECS. I have a role setup, and I've added the roleARN to the task definition, using the setup here:…
fuzzi
  • 1,380
  • 3
  • 25
  • 59
3
votes
0 answers

Terraform Cloud / Enterprise - How to use AWS Assume Roles

I would like to use AWS Assume Roles, with Terraform Cloud / Enterprise In Terraform Open Source, you would typically just do an Assume Role, leveraging the .aws/Credential Profile on the CLI, which is the initial authentication, and performing the…
3
votes
1 answer

Terraform: Issue with assume_role

I'm trying to solve this mystery for few days now, but no joy. Basically, Terraform cannot assume role and failing with: Initializing the backend... 2019/10/28 09:13:09 [DEBUG] New state was assigned lineage…
MacUsers
  • 1,761
  • 3
  • 28
  • 48
3
votes
0 answers

Why role assuming should be done inside the lambda?

This is about why AWS Lambda Service has been designed in this way. According to the documentation on How can I configure a Lambda function to assume a role from another AWS account?, to access a resource from another account, the Lambda function…
2
votes
1 answer

CodeBuild is not authorized to perform: sts:AssumeRole on arn:aws:iam/ ...... InvalidInputException; why?

I have a cloudformation stack which exports this role with some policies attached: CodeBuildRole: Type: AWS::IAM::Role Properties: RoleName: codebuild-role AssumeRolePolicyDocument: Statement: …
2
votes
1 answer

bash script for AWS assume-role

I am trying to assume an AWS role within a CI/CD pipeline, hence I have to write a script to change the role via a script. Below is the script to do that, and I used source