Assume Role : Unable to load credentials from system settings

0

Created a Java application and deployed in an EC2 instance, associated the EC2 Instance profile role to the Instance

While making calls to the AWS APIs through AWS Java SDK V2 as well as V1 getting the below error

KmsClient client = KmsClient.builder().region(amazonSessionMapper.getRegion()).build();

Unable to load credentials from system settings. Access key must be specified either via environment variable (AWS_ACCESS_KEY_ID) or system property (aws.accessKeyId).


FINEST|1432182/0|Service controller|22-01-20 13:49:37|software.amazon.awssdk.core.exception.SdkClientException: Unable to load credentials from system settings. Access key must be specified either via environment variable (AWS_ACCESS_KEY_ID) or system property (aws.accessKeyId).
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.exception.SdkClientException$BuilderImpl.build(SdkClientException.java:98) ~[software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.internal.SystemSettingsCredentialsProvider.resolveCredentials(SystemSettingsCredentialsProvider.java:58) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.AwsCredentialsProviderChain.resolveCredentials(AwsCredentialsProviderChain.java:91) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.internal.LazyAwsCredentialsProvider.resolveCredentials(LazyAwsCredentialsProvider.java:45) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.auth.credentials.DefaultCredentialsProvider.resolveCredentials(DefaultCredentialsProvider.java:104) ~[software.amazon.awssdk-auth-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsClientHandlerUtils.createExecutionContext(AwsClientHandlerUtils.java:79) ~[software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.createExecutionContext(AwsSyncClientHandler.java:68) ~[software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.lambda$execute$1(BaseSyncClientHandler.java:99) ~[software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.measureApiCallSuccess(BaseSyncClientHandler.java:169) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.internal.handler.BaseSyncClientHandler.execute(BaseSyncClientHandler.java:95) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.core.client.handler.SdkSyncClientHandler.execute(SdkSyncClientHandler.java:45) [software.amazon.awssdk-sdk-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.awscore.client.handler.AwsSyncClientHandler.execute(AwsSyncClientHandler.java:55) [software.amazon.awssdk-aws-core-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.services.kms.DefaultKmsClient.listAliases(DefaultKmsClient.java:4466) [software.amazon.awssdk-kms-2.16.84.jar:?]
FINEST|1432182/0|Service controller|22-01-20 13:49:37|	at software.amazon.awssdk.services.kms.KmsClient.listAliases(KmsClient.java:7885) [software.amazon.awssdk-kms-2.16.84.jar:?]
  • Do you have an instance Role associated with the instance that has the correct KMS permissions?

demandé il y a 2 ans3179 vues
1 réponse
0

That message is a debug level message and SDK should retrieve credentials from the next provider in a chain. So I suppose your KMS client should work.

répondu il y a 2 ans

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions