aws codecommit credential-helper issue

Question

Original issue: unable to access codecommit repos, returning 403 error. I am able to access it only when directly inputting credentials into the https string.

I am trying to troubleshot my aws cli credentials, but aws codecommit credential-helper get is not returning anything. I checked IAM permissions, reinstalled awscli, checked aws credentials.

myronix88 · Answer

Did you create HTTPS Git credentials under iam user?

Oleksii Bebych · Answer

The following get-caller-identity command displays information about the IAM identity used to authenticate the request. The caller is an IAM user.

```
aws sts get-caller-identity

```

Example output:
```
{
    "UserId": "AIDASAMPLEUSERID",
    "Account": "123456789012",
    "Arn": "arn:aws:iam::123456789012:user/DevAdmin"
}
```

Ensure that the user DevAdmin has proper permission in the IAM policy  (**AWSCodeCommitPowerUser** or another managed policy for CodeCommit access)

https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-https-unixes.html

Oleksii Bebych · Answer

Ensure that your Git repository configuration is set up to use the credential helper. You can do this by verifying the .git/config file within your repository:

```
[credential]
    helper = !aws codecommit credential-helper $@
    UseHttpPath = true
```

Try running the credential helper manually to see if it returns credentials:
```
aws codecommit credential-helper get
```

If this does not return anything, there might be an issue with your AWS CLI configuration or the credential helper itself.

Ensure that you are using the latest version of the AWS CLI, as updates might contain bug fixes and improvements:
```
aws --version
```

Enable debug logging for the AWS CLI to get more detailed output, which might help in identifying the issue:
```
aws codecommit credential-helper get --debug
```

aws codecommit credential-helper issue

回答を追加する

関連するコンテンツ