Error: OpenIDConnect provider's HTTPS certificate doesn't match configured thumbprint while connecting github actions to AWS using IAM role based authentication

0

Error: OpenIDConnect provider's HTTPS certificate doesn't match configured thumbprint

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Federated": "arn:aws:iam::XXXXXXXXXXX:oidc-provider/token.actions.githubusercontent.com"
            },
            "Action": [
                "sts:AssumeRoleWithWebIdentity"
            ],
            "Condition": {
                "StringEquals": {
                    "token.actions.githubusercontent.com:sub": "repo:XXXXX/*"
                },
                "ForAllValues:StringEquals": {
                    "token.actions.githubusercontent.com:aud": "sts.amazonaws.com",
                    "token.actions.githubusercontent.com:iss": "https://token.actions.githubusercontent.com"
                }
            }
        }
    ]
}
type: OpenID Connect
provider: https://token.actions.githubusercontent.com/
thumbprint : 6938fd4d98bab03faadb97b34396831e3780aea1
Audience: sts.amazonaws.com
profile picture
Kamran
질문됨 일 년 전1537회 조회
3개 답변
0
profile picture
전문가
답변함 일 년 전
profile picture
전문가
검토됨 일 년 전
0

However the key was same but now its giving me..

Error: Not authorized to perform sts:AssumeRoleWithWebIdentity. please refer to my pain post I have already provided these rights.

profile picture
Kamran
답변함 일 년 전
0

The following blog may be related to this issue if it has not already been resolved.
Try setting two keys according to the documentation.
https://github.blog/changelog/2023-06-27-github-actions-update-on-oidc-integration-with-aws/

Customers experiencing issues authenticating via OIDC with AWS should configure both thumbprints to be trusted in the AWS portal. The two known intermediary thumbprints at this time are:

6938fd4d98bab03faadb97b34396831e3780aea1
1c58a3a8518e8759bf075b76b750d4f2df264fcd

profile picture
전문가
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠