Description:
Trying, and failing, to publish a greengrass component in the ca-central-1 region.
I have read and checked the steps in:
https://docs.aws.amazon.com/greengrass/v2/developerguide/troubleshooting.html for the error, 'Invalid Input: Encountered following errors in Artifacts: {<s3ArtifactUri> = Specified artifact resource cannot be accessed}
'
Tools/Versions:
aws-cli/2.10.3 Python/3.9.11 Linux/5.15.0-60-generic exe/x86_64.ubuntu.20
Command:
aws greengrassv2 create-component-version --inline-recipe fileb://<name>-<version-number>.yaml
Debug steps taken:
- Both AWS S3 bucket and create-component-version invocation are in the same region (ca-central-1). Set with both --region flag in the command, and with aws configure default region. both 'ca-central-1'
- The S3 artifact URI is valid - i can aws s3 cp dopy it locally
- i can create the component via the console, but not using aws cli
- AWS account has permissions (full admin permissions set, no deny policies)
RESOLVED - see comment on response below re. credentials
I’m able to run AWS S3 cp , and ls, on the URI included in the error message.
The exact same recipe, when copy pasted manually into the console, ( signed in as the same user ) works, and successfully creates the component
The issue was my local credentials - they had to be refreshed. Although I could S3 copy/ls with the credentials I had on my cli, they did not permit me to issue greengrass client commands, once they were refreshed I could.