Suddenly getting an error "Credential is not correct" Amazon SSM

0

Hi,

We are suddenly getting an error "Credential is not correct" in Amazon SSM Logs. Our Cloudwatch custom metrics have stopped working. We have not changed anything and also made sure that SSM Role is attached to that instance. We also tried to put credential file in the server on .aws folder on the windows server. PSB Actual error getting in log file "amazon-ssm-cloudwatch.log".

Credential is not correct. Setting CloudWatchService IsImpaired to be true, Failed to upload metric to CloudWatch. Amazon.CloudWatch.AmazonCloudWatchException: Amazon CloudWatch Metrics no longer supports TLS 1.0 and TLS 1.1 connections. You must update your client to use TLS version 1.2 or above. To learn more and to update your client, see https://go.aws/3AUlVSb. For further assistance, contact AWS support ---> Amazon.Runtime.Internal.HttpErrorResponseException: The remote server returned an error: (403) Forbidden. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden. at System.Net.HttpWebRequest.GetResponse() at Amazon.Runtime.Internal.HttpRequest.GetResponse() --- End of inner exception stack trace --- at Amazon.Runtime.Internal.HttpRequest.GetResponse() at Amazon.Runtime.Internal.HttpHandler1.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.Unmarshaller.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.ErrorHandler.InvokeSync(IExecutionContext executionContext) --- End of inner exception stack trace --- at Amazon.Runtime.Internal.HttpErrorResponseExceptionHandler.HandleException(IExecutionContext executionContext, HttpErrorResponseException exception) at Amazon.Runtime.Internal.ErrorHandler.ProcessException(IExecutionContext executionContext, Exception exception) at Amazon.Runtime.Internal.ErrorHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.CallbackHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.RetryHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.CallbackHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.CallbackHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.ErrorCallbackHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.MetricsHandler.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.Internal.RuntimePipeline.InvokeSync(IExecutionContext executionContext) at Amazon.Runtime.AmazonServiceClient.Invoke[TRequest,TResponse](TRequest request, IMarshaller2 marshaller, ResponseUnmarshaller unmarshaller) at Amazon.CloudWatch.AmazonCloudWatchClient.PutMetricData(PutMetricDataRequest request) at AWS.EC2.Windows.CloudWatch.CloudWatch.CloudWatchService.TryPutMetricData(List`1 metrics, String nameSpace)

asked 6 months ago206 views
2 Answers
1
Accepted Answer

This error indicates that your Amazon SSM agent is still using TLS 1.0 or 1.1 to connect to CloudWatch, which are now deprecated.

profile pictureAWS
answered 6 months ago
profile pictureAWS
EXPERT
reviewed 6 months ago
0

Thanks @Dave Connelly AWS. I updated SSM Agent and its working now.

answered 6 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions