aws codecommit credential-helper issue


Original issue: unable to access codecommit repos, returning 403 error. I am able to access it only when directly inputting credentials into the https string.

I am trying to troubleshot my aws cli credentials, but aws codecommit credential-helper get is not returning anything. I checked IAM permissions, reinstalled awscli, checked aws credentials.

feita há 2 meses95 visualizações
3 Respostas

The following get-caller-identity command displays information about the IAM identity used to authenticate the request. The caller is an IAM user.

aws sts get-caller-identity

Example output:

    "Account": "123456789012",
    "Arn": "arn:aws:iam::123456789012:user/DevAdmin"

Ensure that the user DevAdmin has proper permission in the IAM policy (AWSCodeCommitPowerUser or another managed policy for CodeCommit access)

profile picture
respondido há 2 meses
  • I checked the permissions and I have AWSCodeCommitPowerUser assigned. aws sts get-caller-identity also returns the correct user

  • what does 'aws sts get-caller-identity' show ?

  • it outputs a json object with my UserId, Account, and Arn. I checked my user and it has admin permissions. aws codecommit list-repositories gets me the correct repository, but aws codecommit credential-helper get is not returning anything.


Did you create HTTPS Git credentials under iam user?

profile picture
respondido há 2 meses
  • Yes, I setup HTTPS Git credentials. Confirmed the user from aws configure.


Ensure that your Git repository configuration is set up to use the credential helper. You can do this by verifying the .git/config file within your repository:

    helper = !aws codecommit credential-helper $@
    UseHttpPath = true

Try running the credential helper manually to see if it returns credentials:

aws codecommit credential-helper get

If this does not return anything, there might be an issue with your AWS CLI configuration or the credential helper itself.

Ensure that you are using the latest version of the AWS CLI, as updates might contain bug fixes and improvements:

aws --version

Enable debug logging for the AWS CLI to get more detailed output, which might help in identifying the issue:

aws codecommit credential-helper get --debug
profile picture
respondido há 2 meses

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas