Simple AWS CLI commands like aws ec2 describe-images --region $REGION
produce the error
AWS was not able to validate the provided access credentials
when REGION
is one of af-south-1, ap-east-1, eu-south-1, or me-south-1.
This StackOverflow question says that newer regions only support Signature Version 4. How do I choose this in my AWS CLI (v. 2.4.15)? This says that that happens automatically, but clearly it does not.
Notes:
- This occurs whether I have this
~/.aws/config file
or it is missing:
region = us-east-1
output = json
cli_pager=
That is it! How do we tell AWS that this error message is very confusing. After you enable the region, you will see a message you to change settings for STS tokens. The error message is suitable for attempts to use an enabled non-default regin before making that change to STS config.