Does not seem to work when using AWS Org Admin Access keys

[Systemgeek-louis]

I am an AWS Org Admin. In the AWS portal I selected the access keys for one of my accounts and pasted that into my terminal on my mac.

louis@gatekeeper ~/Downloads [1]> export AWS_ACCESS_KEY_ID=""
                                  export AWS_SECRET_ACCESS_KEY=""
                                  export AWS_SESSION_TOKEN=""
louis@gatekeeper ~/Downloads> rain ls
failed to list stacks: operation error CloudFormation: ListStacks, https response error StatusCode: 0, RequestID: , request send failed, Post "https://cloudformation.us-east1.amazonaws.com/": dial tcp: lookup cloudformation.us-east1.amazonaws.com: no such host

When i try https://cloudformation.us-east1.amazonaws.com/ in my browser that does not work either. When I go to Cloudformation in the portal my URL is: https://us-east-1.console.aws.amazon.com/cloudformation/

[ericzbeard]

I just edited the comment to remove the access keys.

[Systemgeek-louis]

I actually had faked the keys… From: Eric Z. Beard ***@***.***> Date: Tuesday, January 28, 2025 at 13:55 To: aws-cloudformation/rain ***@***.***> Cc: Louis Bohm ***@***.***>, Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) I just edited the comment to remove the access keys. — Reply to this email directly, view it on GitHub<#633 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAGOYCRB4KQRWJM74X4HG232M7HBXAVCNFSM6AAAAABWBFMZLWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJZHAYTSMZRGY>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[ericzbeard]

I'm not sure what's going on here, I think it might be an issue with your AWS config. Does the aws cli return results using those keys?

[Systemgeek-louis]

It’s been forever since I tried to run the aws cli from my local terminal. First thing I found was that my version of AWS CLI was 2.11. So, I upgraded it. But that did not fix things: ***@***.*** ~/Downloads> aws --version aws-cli/2.23.7 Python/3.12.6 Darwin/24.2.0 exe/x86_64 ***@***.*** ~/Downloads> aws s3 ls Could not connect to the endpoint URL: https://s3.us-east1.amazonaws.com/ Louis From: Eric Z. Beard ***@***.***> Date: Tuesday, January 28, 2025 at 13:59 To: aws-cloudformation/rain ***@***.***> Cc: Louis Bohm ***@***.***>, Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) I'm not sure what's going on here, I think it might be an issue with your AWS config. Does the aws cli return results using those keys? — Reply to this email directly, view it on GitHub<#633 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAGOYCRIZIAWOPLAUYRHDG32M7HRFAVCNFSM6AAAAABWBFMZLWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJZHAZDONBZGY>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Systemgeek-louis]

Ok. I got the AWS Cli working. I had to remove the .aws directory. But that breaks Rain: ***@***.*** ~> aws s3 ls 2024-11-18 15:59:59 aws-cloudtrail-logs-846356322339-3c2c680d 2023-05-16 11:45:22 cf-templates-1fxr8w14x7iyf-eu-central-1 2022-11-25 17:24:08 cf-templates-1fxr8w14x7iyf-us-east-1 2023-10-11 09:41:51 cf-templates-1fxr8w14x7iyf-us-west-2 ***@***.*** ~ [1]> rain ls -a a region was not specified. You can run 'aws configure' or choose a profile with a region Louis From: Louis Bohm ***@***.***> Date: Tuesday, January 28, 2025 at 14:05 To: aws-cloudformation/rain ***@***.***>, aws-cloudformation/rain ***@***.***> Cc: Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) It’s been forever since I tried to run the aws cli from my local terminal. First thing I found was that my version of AWS CLI was 2.11. So, I upgraded it. But that did not fix things: ***@***.*** ~/Downloads> aws --version aws-cli/2.23.7 Python/3.12.6 Darwin/24.2.0 exe/x86_64 ***@***.*** ~/Downloads> aws s3 ls Could not connect to the endpoint URL: https://s3.us-east1.amazonaws.com/ Louis From: Eric Z. Beard ***@***.***> Date: Tuesday, January 28, 2025 at 13:59 To: aws-cloudformation/rain ***@***.***> Cc: Louis Bohm ***@***.***>, Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) I'm not sure what's going on here, I think it might be an issue with your AWS config. Does the aws cli return results using those keys? — Reply to this email directly, view it on GitHub<#633 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAGOYCRIZIAWOPLAUYRHDG32M7HRFAVCNFSM6AAAAABWBFMZLWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJZHAZDONBZGY>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[Systemgeek-louis]

I think Rain needs some cli options to choose where to get the Auth Creds. With the .aws directory probably being the default but some way to pass them as args or grab them from environment variables. Louis From: Louis Bohm ***@***.***> Date: Tuesday, January 28, 2025 at 14:09 To: aws-cloudformation/rain ***@***.***>, aws-cloudformation/rain ***@***.***> Cc: Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) Ok. I got the AWS Cli working. I had to remove the .aws directory. But that breaks Rain: ***@***.*** ~> aws s3 ls 2024-11-18 15:59:59 aws-cloudtrail-logs-846356322339-3c2c680d 2023-05-16 11:45:22 cf-templates-1fxr8w14x7iyf-eu-central-1 2022-11-25 17:24:08 cf-templates-1fxr8w14x7iyf-us-east-1 2023-10-11 09:41:51 cf-templates-1fxr8w14x7iyf-us-west-2 ***@***.*** ~ [1]> rain ls -a a region was not specified. You can run 'aws configure' or choose a profile with a region Louis From: Louis Bohm ***@***.***> Date: Tuesday, January 28, 2025 at 14:05 To: aws-cloudformation/rain ***@***.***>, aws-cloudformation/rain ***@***.***> Cc: Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) It’s been forever since I tried to run the aws cli from my local terminal. First thing I found was that my version of AWS CLI was 2.11. So, I upgraded it. But that did not fix things: ***@***.*** ~/Downloads> aws --version aws-cli/2.23.7 Python/3.12.6 Darwin/24.2.0 exe/x86_64 ***@***.*** ~/Downloads> aws s3 ls Could not connect to the endpoint URL: https://s3.us-east1.amazonaws.com/ Louis From: Eric Z. Beard ***@***.***> Date: Tuesday, January 28, 2025 at 13:59 To: aws-cloudformation/rain ***@***.***> Cc: Louis Bohm ***@***.***>, Author ***@***.***> Subject: Re: [aws-cloudformation/rain] Does not seem to work when using AWS Org Admin Access keys (Issue #633) I'm not sure what's going on here, I think it might be an issue with your AWS config. Does the aws cli return results using those keys? — Reply to this email directly, view it on GitHub<#633 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAGOYCRIZIAWOPLAUYRHDG32M7HRFAVCNFSM6AAAAABWBFMZLWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJZHAZDONBZGY>. You are receiving this because you authored the thread.Message ID: ***@***.***>