Assume Role : Unable to load credentials from system settings

0

Created a Java application and deployed in an EC2 instance, associated the EC2 Instance profile role to the Instance

While making calls to the AWS APIs through AWS Java SDK V2 as well as V1 getting the below error

KmsClient client = KmsClient.builder().region(amazonSessionMapper.getRegion()).build();

Unable to load credentials from system settings. Access key must be specified either via environment variable (AWS_ACCESS_KEY_ID) or system property (aws.accessKeyId).


FINEST|1432182/0|Service controller|22-01-20 13:49:37|software.amazon.awssdk.core.exception.SdkClientException: Unable to load credentials from system settings. Access key must be specified either via environment variable (AWS_ACCESS_KEY_ID) or system property (aws.accessKeyId).
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.exception.SdkClientException$BuilderImpl.build(SdkClientException.java:98) ~[software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.internal.SystemSettingsCredentialsProvider.resolveCredentials(SystemSettingsCredentialsProvider.java:58) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.AwsCredentialsProviderChain.resolveCredentials(AwsCredentialsProviderChain.java:91) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.internal.LazyAwsCredentialsProvider.resolveCredentials(LazyAwsCredentialsProvider.java:45) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.DefaultCredentialsProvider.resolveCredentials(DefaultCredentialsProvider.java:104) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsClientHandlerUtils.createExecutionContext(AwsClientHandlerUtils.java:79) ~[software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.createExecutionContext(AwsSyncClientHandler.java:68) ~[software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.lambda$execute$1(BaseSyncClientHandler.java:99) ~[software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.measureApiCallSuccess(BaseSyncClientHandler.java:169) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.execute(BaseSyncClientHandler.java:95) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.client.handler.SdkSyncClientHandler.execute(SdkSyncClientHandler.java:45) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.execute(AwsSyncClientHandler.java:55) [software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.services.kms.DefaultKmsClient.listAliases(DefaultKmsClient.java:4466) [software.amazon.awssdk-kms-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.services.kms.KmsClient.listAliases(KmsClient.java:7885) [software.amazon.awssdk-kms-2.16.84.jar:?]
  • Do you have an instance Role associated with the instance that has the correct KMS permissions?

preguntada hace 2 años3179 visualizaciones
1 Respuesta
0

That message is a debug level message and SDK should retrieve credentials from the next provider in a chain. So I suppose your KMS client should work.

respondido hace 2 años

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas